policyDefinitions/Kubernetes/allowed-host-paths/examples-violations/violation.yaml (22 lines of code) (raw):

apiVersion: v1 kind: Pod metadata: name: nginx-host-filesystem labels: app: nginx-host-filesystem spec: containers: - name: nginx image: nginx volumeMounts: - mountPath: /cache name: cache-volume readOnly: true resources: limits: cpu: "100m" memory: "30Mi" volumes: - name: cache-volume hostPath: path: /tmp # directory location on host