apiVersion: v1
kind: Pod
metadata:
  generateName: imagescan
spec:
  containers:
  - image: docker.io/mfojtik/clamav-scan:latest
    imagePullPolicy: Always
    name: imagescan
    env:
    - name: TARGET_IMAGE
      value: docker.io/mfojtik/virus-test:latest
    resources: {}
    securityContext:
      privileged: true
    volumeMounts:
    - mountPath: /secrets/docker
      name: dockercfg
      readOnly: true
    - mountPath: /var/run/docker.sock
      name: docker-socket
  restartPolicy: Never
  volumes:
  - name: dockercfg
    secret:
      defaultMode: 420
      secretName: default-dockercfg-3dmd8
  - name: docker-socket
    hostPath:
      path: /var/run/docker.sock
