message: Update pod YAML sample for restricted pod security admission policy
  The sample pod template should set security context values allowed by
  the `restricted` policy level for the pod security admission controller,
  which will be enabled by default in OpenShift.
diff: @@ -379,11 +379,20 @@ metadata:
  labels:
  app: httpd
  spec:
  + securityContext:
  + runAsNonRoot: true
  + seccompProfile:
  + type: RuntimeDefault
  containers:
  - name: httpd
  image: image-registry.openshift-image-registry.svc:5000/openshift/httpd:latest
  ports:
  - containerPort: 8080
  + securityContext:
  + allowPrivilegeEscalation: false
  + capabilities:
  + drop:
  + - ALL
  `,
  )
  .setIn(
  