apiVersion: apps/v1
kind: Deployment
metadata:
  name: pdp
  labels:
    app.kubernetes.io/name: pdp
spec:
  replicas: 1
  selector:
    matchLabels:
      app.kubernetes.io/name: pdp
  template:
    metadata:
      labels:
        app.kubernetes.io/name: pdp
    spec:
      volumes:
      - name: disk
        persistentVolumeClaim:
          claimName: pdp-disk
      containers:
      - name: pdp
        image: <TAG>
        volumeMounts:
          - name: disk
            mountPath: /mnt
        securityContext:
          allowPrivilegeEscalation: true
          privileged: true