apiVersion: v1
kind: Pod
metadata:
  name: myapp-pod
  labels:
    foo: bar
spec:
  containers:
  - name: nginx
    image: nginx:latest
  securityContext:
    runAsUser: 1000
    runAsGroup: 3000
    fsGroup: 2000
