apiVersion: batch/v1
kind: Job
metadata:
  name: pi-with-ttl-2
spec:
  ttlSecondsAfterFinished: 100
  template:
    spec:
      containers:
      - name: pi
        image: perl:5.3
        command: ["perl",  "-Mbignum=bpi", "-wle", "print bpi(2000)"]
        securityContext:
          allowPrivilegeEscalation: true
          privileged: false 
          readOnlyRootFilesystem: true
          runAsNonRoot: true
          capabilities:
            drop:
              - ALL
      restartPolicy: Never