apiVersion: apps/v1
kind: Deployment
metadata:
  name: deployment-complete-annotation-whitelist
  namespace: test
spec:
  replicas: 1
  selector:
    matchLabels:
      app: sleep-complete
  template:
    metadata:
      labels:
        app: sleep-complete
      annotations:
        admission.validation.avast.com/readonly-rootfs-containers-whitelist: "sleep-writable"
    spec:
      containers:
      - name: sleep
        image: tutum/curl
        command: ["/bin/sleep","infinity"]
        resources:
          requests:
            cpu: "100m"
            memory: "5M"
          limits:
            cpu: "200m"
            memory: "30M"
        securityContext:
          readOnlyRootFilesystem: true
      - name: sleep-writable
        image: tutum/curl
        command: ["/bin/sleep","infinity"]
        resources:
          requests:
            cpu: "100m"
            memory: "5M"
          limits:
            cpu: "200m"
            memory: "30M"
