podman.yaml

---
# sudo podman play kube podman.yaml
# sudo podman pod rm emporous --force
apiVersion: v1
kind: Pod
metadata:
  name: emporous
  labels:
    app: emporous
  annotations:
    io.kubernetes.cri-o.TTY/site: "false"
    io.podman.annotations.init/site: "FALSE"
    io.podman.annotations.label/site: disable
    io.podman.annotations.autoremove/site: "TRUE"
    io.podman.annotations.privileged/site: "FALSE"
    io.podman.annotations.publish-all/site: "FALSE"
    org.opencontainers.image.base.name/site: ghcr.io/emporous/site:latest
spec:
  containers:
  - image: ghcr.io/emporous/site:latest
    name: site
    ports:
    - containerPort: 3000
      hostPort: 3000
    securityContext:
      capabilitieskj:
        drop:
        - CAP_MKNOD
        - CAP_NET_RAW
        - CAP_AUDIT_WRITE
      seLinuxOptions:
        type: spc_t
    volumeMounts:
    - mountPath: /src
      name: emporous.github.io
  volumes:
  - name: emporous.github.io
    hostPath:
      type: Directory
      path: .