apiVersion: v1
kind: Pod
metadata:
  labels:
    run: busybox-deny-writes
  name: busybox-deny-writes
  annotations:
    container.apparmor.security.beta.kubernetes.io/busybox: localhost/k8s-apparmor-deny-writes
spec:
  containers:
  - command:
    - sleep
    - 1d
    image: busybox
    name: busybox
    resources: {}
  restartPolicy: Never
