---
apiVersion: v1
kind: Pod
metadata:
  annotations:
    io.kubernetes.cri-o.TTY/nbitwebsite: "false"
    io.podman.annotations.autoremove/nbitwebsite: "FALSE"
    io.podman.annotations.init/nbitwebsite: "FALSE"
    io.podman.annotations.label/nbitwebsite: type:container_runtime_t
    io.podman.annotations.privileged/nbitwebsite: "FALSE"
    io.podman.annotations.publish-all/nbitwebsite: "FALSE"
  labels:
    app: nbitwebsite-pod
  name: nbitwebsite-pod
spec:
  containers:
  - image: docker.io/library/nginx:latest
    name: nginx
    ports:
    - containerPort: 80
      hostPort: 9000
      hostIP: 127.0.0.1
    securityContext:
      capabilities:
        drop:
        - CAP_MKNOD
        - CAP_AUDIT_WRITE
    volumeMounts:
    - mountPath: /usr/share/nginx/html
      name: data-nbitwebsite-host-0
    - mountPath: /etc/nginx/conf.d
      name: data-nbitwebsite-config-0
  volumes:
  - hostPath:
      path: /data/nbitwebsite/document_root
      type: Directory
    name: data-nbitwebsite-host-0
  - hostPath:
      path: /data/nbitwebsite/conf.d
      type: Directory
    name: data-nbitwebsite-config-0