apiVersion: v1
kind: Pod
metadata:
  name: capabilities_baseline3
spec:
  containers:
  - image: k8s.gcr.io/pause
    name: container1
    securityContext:
      capabilities:
        add:
        - CAP_CHOWN
  initContainers:
  - image: k8s.gcr.io/pause
    name: initcontainer1
    securityContext:
      capabilities: {}
  securityContext: {}
