I want to be able to override the `gcr.io/google_containers/pause` container only in a single pod. I'm having trouble finding in the documentation if it's possible at all.

I'm trying to set up a VPN client container/pod and use it's networking namespace to connect to an remote DC, but only for a single pod group.

The closest I have found is the `--pod-infra-container-image` flag on kubelet, which would modify it for all pods.