apiVersion: v1
    kind: Pod
    ...
    spec:
      containers:
      - name: ...
        volumeMounts:
        - name: nfs
          mountPath: /usr/share/...
      securityContext:
        supplementalGroups: [5555]
      volumes:
      - name: nfs
        nfs:
          server: <nfs_server_ip_or_host>
          path: /opt/nfs

kind: Pod
...
spec:
  containers:
  - name: ...
  securityContext:
    fsGroup: 5555

spec:
  containers:
  - name: ...
    securityContext:
      runAsUser: 1000100001

securityContext:
    seLinuxOptions:
      level: "s0:c123,c456"