---
apiVersion: apps/v1
kind: StatefulSet
metadata:
  name: statefulset
  namespace: read-only-root-filesystem-false-allowed-multi-labels
spec:
  serviceName: statefulset
  selector:
    matchLabels:
      name: statefulset
  template:
    metadata:
      labels:
        name: statefulset
        container.audit.kubernetes.io/container1.allow-read-only-root-filesystem-false: "SomeReason"
        container.audit.kubernetes.io/container2.allow-read-only-root-filesystem-false: "SomeReason"
    spec:
      containers:
        - name: container1
          image: scratch
          securityContext:
            readOnlyRootFilesystem: false
        - name: container2
          image: scratch
          securityContext:
            readOnlyRootFilesystem: false
