apiVersion: v1 kind: Pod metadata: name: pod-privileged namespace: default spec: containers: - name: app image: nginx:1.25.3 securityContext: privileged: true resources: limits: memory: "128Mi" cpu: "100m"