policyDefinitions/Kubernetes/container-allowed-capabilities/examples-good/example_good.yaml [1:18]:
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
apiVersion: v1
kind: Pod
metadata:
  name: opa-capability-good
  labels:
    owner: me.agilebank.demo
spec:
  containers:
    - name: opa
      image: openpolicyagent/opa:0.9.2
      args:
        - "run"
        - "--server"
        - "--addr=localhost:8080"
      securityContext:
        # Assuming assignment uses the following:
        capabilities:
          add: ["allowedcapability"]
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -



policyDefinitions/Kubernetes/container-disallowed-capabilities/examples-good/example_good.yaml [1:17]:
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
apiVersion: v1
kind: Pod
metadata:
  name: opa-capability-good
  labels:
    owner: me.agilebank.demo
spec:
  containers:
    - name: opa
      image: openpolicyagent/opa:0.9.2
      args:
        - "run"
        - "--server"
        - "--addr=localhost:8080"
      securityContext:
        capabilities:
          add: ["allowedcapability"]
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -



