apiVersion: v1
kind: Pod
metadata:
  labels:
    run: nginx
  name: nginx
spec:
  securityContext: # insert this line
    runAsUser: 101 # UID for the user
  volumes:
    - name: myvolume
      configMap:
        name: cmvolume
  containers:
  - image: nginx
    imagePullPolicy: IfNotPresent
    name: nginx
    securityContext: # insert this line
      capabilities: # and this
        add: [ "NET_ADMIN", "SYS_TIME" ] # this as well
    resources: {}
    volumeMounts:
      - mountPath: /etc/lala
        name: myvolume
  dnsPolicy: ClusterFirst
  restartPolicy: Never
status: {}
