kubernetes/staging/src/k8s.io/pod-security-admission/test/testdata/restricted/v1.27/pass/restrictedvolumes0.yaml

apiVersion: v1
kind: Pod
metadata:
  name: restrictedvolumes0
spec:
  containers:
  - image: registry.k8s.io/pause
    name: container1
    securityContext:
      allowPrivilegeEscalation: false
      capabilities:
        drop:
        - ALL
  initContainers:
  - image: registry.k8s.io/pause
    name: initcontainer1
    securityContext:
      allowPrivilegeEscalation: false
      capabilities:
        drop:
        - ALL
  securityContext:
    runAsNonRoot: true
    seccompProfile:
      type: RuntimeDefault
  volumes:
  - name: volume0
  - emptyDir: {}
    name: volume1
  - name: volume2
    secret:
      secretName: test
  - name: volume3
    persistentVolumeClaim:
      claimName: test
  - downwardAPI:
      items:
      - fieldRef:
          fieldPath: metadata.labels
        path: labels
    name: volume4
  - configMap:
      name: test
    name: volume5
  - name: volume6
    projected:
      sources: []