apiVersion: v1 kind: Pod metadata: labels: name: hello-pod name: hello-pod annotations: security.alpha.kubernetes.io/sysctls: kernel.shm_rmid_forced=hello spec: containers: - image: "docker.io/ocpqe/hello-pod:latest" imagePullPolicy: IfNotPresent name: hello-pod ports: - containerPort: 8080 protocol: TCP resources: {} securityContext: capabilities: {} privileged: false terminationMessagePath: /dev/termination-log volumeMounts: - mountPath: /tmp name: tmp dnsPolicy: ClusterFirst restartPolicy: Always serviceAccount: "" volumes: - emptyDir: {} name: tmp status: {}