Privileged Kubernetes Netshoot pod for with host mounted read-only at /mnt/root

k8s-netshoot.yaml

apiVersion: v1
kind: Pod
metadata:
  labels:
    app: netshoot
  name: netshoot
spec:
  containers:
    - args:
        - sleep
        - 3650d
      image: docker.io/nicolaka/netshoot:latest
      imagePullPolicy: Always
      name: netshoot
      securityContext:
        privileged: true
        runAsUser: 0
      volumeMounts:
        - mountPath: /mnt/root
          name: host-root
          readOnly: true
  nodeSelector:
    kubernetes.io/arch: amd64
  restartPolicy: Always
  tolerations:
    - effect: NoSchedule
      key: hub.jupyter.org/dedicated
      operator: Equal
      value: user
  volumes:
    - hostPath:
        path: /
        type: Directory
      name: host-root