apiVersion: v1
kind: Pod
metadata:
  name: procmount1
  annotations:
    test.pod-security.cybozu.com/message: "denied the request: spec.containers[0].securityContext.procMount: Forbidden: ProcMountType Unmasked is not allowed"
spec:
  securityContext:
    runAsNonRoot: true
  containers:
    - name: ubuntu
      image: quay.io/cybozu/ubuntu
      securityContext:
        procMount: Unmasked
