sshca-cli/ci/podTemplate-container.yaml

spec:
  containers:
  - name: buildah
    image: quay.io/containers/buildah:v1
    command:
    - cat
    stdin: true
    tty: true
    securityContext:
      capabilities:
        add:
        - SYS_ADMIN
        - MKNOD
        - SYS_CHROOT
        - SETFCAP
    resources:
      limits:
        github.com/fuse: 1
  hostUsers: false