apiVersion: v1
kind: Pod
metadata:
  name: restrictedvolumes0
spec:
  containers:
  - image: k8s.gcr.io/pause
    name: container1
    securityContext:
      allowPrivilegeEscalation: false
  initContainers:
  - image: k8s.gcr.io/pause
    name: initcontainer1
    securityContext:
      allowPrivilegeEscalation: false
  securityContext:
    runAsNonRoot: true
  volumes:
  - configMap:
      name: volume-configmap-test
    name: volume-configmap
  - downwardAPI:
      items:
      - fieldRef:
          fieldPath: metadata.labels
        path: labels
    name: volume-downwardapi
  - emptyDir: {}
    name: volume-emptydir
  - name: volume-pvc
    persistentVolumeClaim:
      claimName: test
  - name: volume-projects
    projected:
      sources: []
  - name: volume-secret
    secret:
      secretName: test
