---
apiVersion: v1
kind: Pod
metadata:
  name: privileged
spec:
  securityContext:
    runAsNonRoot: true
  containers:
  - name: privileged
    image: busybox
    command: ["sleep", "9999"]
    securityContext:
      allowPrivilegeEscalation: true
