apiVersion: v1
kind: Pod
metadata:
  name: pod
  namespace: host-pid-true-allowed
  labels:
    audit.kubernetes.io/pod.allow-namespace-host-PID: "SomeReason"
spec:
  hostPID: true
  containers:
    - name: container
      image: scratch
