apiVersion: v1
kind: Pod
metadata:
  name: test-raw-block-pod
spec:
  containers:
    - name: my-container
      image: nginx
      securityContext:
         capabilities:
           add: ["SYS_ADMIN"]
      volumeDevices:
        - devicePath: /dev/block
          name: my-volume
      imagePullPolicy: IfNotPresent
  volumes:
    - name: my-volume
      persistentVolumeClaim:
        claimName: test-raw-block-pv
