apiVersion: v1
kind: Pod
metadata:
  name: pod-test-1
spec:
  containers:
  - name: foobar
    image: foo/bar:latest
    securityContext:
      privileged: False
      runAsUser: 30000
      runAsGroup: 30000
      readOnlyRootFilesystem: True
