apiVersion: v1
kind: Pod
metadata:
  name: network-tools
spec:
  containers:
  - name: network-tools
    image: docker.io/volkerraschek/network-tools:latest
    imagePullPolicy: Always
    resources:
      limits:
        cpu: 250m
        memory: 250Mi
      requests:
        cpu: 100m
        memory: 125Mi
    securityContext:
      capabilities :
        add:
        - NET_ADMIN
        - SYS_TIME
      runAsUser: 1000
  restartPolicy: Always