apiVersion: apps/v1
kind: StatefulSet
metadata:
  name: web-complete-annotation-whitelist
  namespace: test
spec:
  serviceName: "nginx"
  selector:
    matchLabels:
      app: nginx
  template:
    metadata:
      labels:
        app: nginx
      annotations:
        admission.validation.avast.com/readonly-rootfs-containers-whitelist: "nginx"
    spec:
      containers:
        - name: nginx
          image: k8s.gcr.io/nginx-slim:0.8
          ports:
            - containerPort: 80
              name: web
          resources:
            requests:
              cpu: "100m"
              memory: "5M"
            limits:
              cpu: "200m"
              memory: "30M"
