apiVersion: v1
kind: Pod
metadata:
  name: non-root-group4
spec:
  securityContext:
    runAsNonRoot: true
  containers:
    - name: ubuntu
      image: quay.io/cybozu/ubuntu
      securityContext:
        runAsGroup: 1000
