policyDefinitions/Kubernetes/container-disallowed-capabilities/examples-violations/violation.yaml

apiVersion: v1
kind: Pod
metadata:
  name: opa-capability-bad
  labels:
    owner: me.agilebank.demo
spec:
  containers:
    - name: opa
      image: openpolicyagent/opa:0.9.2
      args:
        - "run"
        - "--server"
        - "--addr=localhost:8080"
      securityContext:
        capabilities:
          add: ["blockedcapability"]
      resources:
        limits:
          cpu: "100m"
          memory: "30Mi"