apiVersion: v1
kind: Pod
metadata:
  name: nginx
spec:
  containers:
  - name: nginx
    image: nginx:1.14.2
    securityContext:
      seccompProfile:
        type: RuntimeDefault
      runAsUser: 0
      allowPrivilegeEscalation: false
    ports:
    - containerPort: 80