apiVersion: apps/v1
kind: Deployment
metadata:
  name: disallowed-pod-deployment
  labels:
    app.kubernetes.io/name: disallowed-pod-deployment
    app.kubernetes.io/part-of: falco-event-generator
    falco.org/rule: Create-Disallowed-Pod
spec:
  replicas: 1
  selector:
    matchLabels:
      app.kubernetes.io/name: disallowed-pod-busybox
  template:
    metadata:
      labels:
        app.kubernetes.io/name: disallowed-pod-busybox
        app.kubernetes.io/part-of: falco-event-generator
    spec:
      containers:
        - name: busybox
          image: busybox
          command: ["/bin/sh", "-c", "while true; do echo sleeping; sleep 3600; done"]
