apiVersion: v1
kind: Pod
metadata:
  name: sysctl
  annotations:
    test.pod-security.cybozu.com/message: "denied the request: [spec.securityContext.sysctls[0]: Forbidden: Setting sysctl net.core.somaxconn is not allowed, spec.securityContext.sysctls[1]: Forbidden: Setting sysctl kernel.msgmax is not allowed]"
spec:
  securityContext:
    runAsNonRoot: true
    sysctls:
      - name: net.core.somaxconn
        value: "1024"
      - name: kernel.msgmax
        value: "65536"
  containers:
    - name: ubuntu
      image: quay.io/cybozu/ubuntu
