policyDefinitions/Kubernetes/selinux/examples-violations/violation.yaml (20 lines of code) (raw):
apiVersion: v1
kind: Pod
metadata:
name: nginx-selinux
labels:
app: nginx-selinux
spec:
containers:
- name: nginx
image: nginx
securityContext:
seLinuxOptions:
level: s1:c234,c567
user: sysadm_u
role: sysadm_r
type: svirt_lxc_net_t
resources:
limits:
cpu: "100m"
memory: "30Mi"