apiVersion: v1
kind: Pod
metadata:
  name: default-apparmor
  annotations:
    "container.apparmor.security.beta.kubernetes.io/ubuntu": "runtime/default"
spec:
  securityContext:
    runAsNonRoot: true
  containers:
    - name: ubuntu
      image: quay.io/cybozu/ubuntu
