apiVersion: v1
kind: Pod
metadata:
  annotations:
    container.apparmor.security.beta.kubernetes.io/notebook: "unconfined"
  name: notebook
spec:
  containers:
  - name: notebook
    image: "ubuntu-sshfs:latest"
    command: []
    securityContext:
      capabilities:
        add:
        - SYS_ADMIN
    volumeMounts:
    - mountPath: /dev/fuse
      name: fuse
  volumes:
  - hostPath:
      path: /dev/fuse
      type: ""
    name: fuse