apiVersion: v1
kind: Pod
metadata:
  name: security-context-demo
  annotations:
    seccomp.security.alpha.kubernetes.io/pod: "runtime/default"
spec:  
  securityContext:
    runAsUser: 1000    
    runAsGroup: 3000
    fsGroup: 2000
    supplementalGroups: [ 1 ]      
  containers:
  - name: sec-ctx-demo
    image: docker.io/alpine:latest
    command: [ "sh", "-c", "touch /tmp/healthy; sleep 1h" ]
    livenessProbe:
      exec:
        command:
        - cat
        - /tmp/healthy
      initialDelaySeconds: 5
      periodSeconds: 5
    securityContext:
      allowPrivilegeEscalation: false             