apiVersion: apps/v1
kind: Deployment
metadata:
name: insecure-app
namespace: default
spec:
replicas: 1
selector:
matchLabels:
app: insecure-app
template:
metadata:
labels:
app: insecure-app
spec:
containers:
- name: nginx
image: nginx:latest
securityContext:
privileged: true
allowPrivilegeEscalation: true
ports:
- containerPort: 22
- containerPort: 80
---
apiVersion: v1
kind: Service
metadata:
name: insecure-service
namespace: default
spec:
type: LoadBalancer
selector:
app: wrong-selector
ports:
- port: 80
targetPort: 8080