apiVersion: v1
kind: Pod
metadata:
  name: homebrew-demo
spec:
  securityContext:
    runAsUser: 1000
    runAsGroup: 3000
    fsGroup: 2000
  containers:
    - name: homebrew-test
      image: busybox:stable
      resources:
        limits:
          memory: "128Mi"
          cpu: "500m"
        requests:
          memory: "64Mi"
          cpu: "250m"
      securityContext:
        readOnlyRootFilesystem: true