apiVersion: v1
kind: Pod
metadata:
  name: hostpath0
spec:
  containers:
  - image: k8s.gcr.io/pause
    name: container1
    securityContext:
      allowPrivilegeEscalation: false
      capabilities:
        drop:
        - ALL
  initContainers:
  - image: k8s.gcr.io/pause
    name: initcontainer1
    securityContext:
      allowPrivilegeEscalation: false
      capabilities:
        drop:
        - ALL
  securityContext:
    runAsNonRoot: true
    seccompProfile:
      type: RuntimeDefault
  volumes:
  - hostPath:
      path: /dev/null
    name: volume-hostpath
  - emptyDir: {}
    name: volume-emptydir
  - configMap:
      items:
      - key: log_level
        path: log_level
      name: configmap
    name: volume-configmap
  - name: configmap
    persistentVolumeClaim:
      claimName: hello
      readOnly: true
