text: {
      "ociVersion": "1.0.0",
      "platform": {
          "os": "linux",
          "arch": "amd64"
      },
      "process": {
          "terminal": false,
          "user": {
              "uid": 996,
              "gid": 994
          },
          "args": [
              "/usr/bin/kube-apiserver-docker.sh"
          ],
          "env": [
              "PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin",
              "TERM=xterm"
          ],
          "cwd": "/",
          "capabilities": {
              "bounding": [
                  "CAP_AUDIT_WRITE",
                  "CAP_KILL",
                  "CAP_NET_BIND_SERVICE",
                  "CAP_DAC_READ_SEARCH"
              ],
              "permitted": [
                  "CAP_AUDIT_WRITE",
                  "CAP_KILL",
                  "CAP_NET_BIND_SERVICE",
                  "CAP_DAC_READ_SEARCH"
              ],
              "inheritable": [
                  "CAP_AUDIT_WRITE",
                  "CAP_KILL",
                  "CAP_NET_BIND_SERVICE",
                  "CAP_DAC_READ_SEARCH"
              ],
              "effective": [
                  "CAP_AUDIT_WRITE",
                  "CAP_KILL",
                  "CAP_NET_BIND_SERVICE",
                  "CAP_DAC_READ_SEARCH"
              ],
              "ambient": [
                  "CAP_AUDIT_WRITE",
                  "CAP_KILL",
                  "CAP_NET_BIND_SERVICE",
                  "CAP_DAC_READ_SEARCH"
              ]
          },
          "rlimits": [
              {
                  "type": "RLIMIT_NOFILE",
                  "hard": 131072,
                  "soft": 131072
              }
          ]
      },
      "root": {
          "path": "rootfs",
          "readonly": true
      },
      "mounts": [
          {
              "destination": "/proc",
              "type": "proc",
              "source": "proc"
          },
          {
              "destination": "/dev",
              "type": "tmpfs",
              "source": "tmpfs",
              "options": [
                  "nosuid",
                  "strictatime",
                  "mode=755",
                  "size=65536k"
              ]
          },
          {
              "destination": "/dev/pts",
              "type": "devpts",
              "source": "devpts",
              "options": [
                  "nosuid",
                  "noexec",
                  "newinstance",
                  "ptmxmode=0666",
                  "mode=0620",
                  "gid=5"
              ]
          },
          {
              "destination": "/dev/shm",
              "type": "tmpfs",
              "source": "shm",
              "options": [
                  "nosuid",
                  "noexec",
                  "nodev",
                  "mode=1777",
                  "size=65536k"
              ]
          },
          {
              "destination": "/dev/mqueue",
              "type": "mqueue",
              "source": "mqueue",
              "options": [
                  "nosuid",
                  "noexec",
                  "nodev"
              ]
          },
          {
              "destination": "/sys",
              "type": "sysfs",
              "source": "sysfs",
              "options": [
                  "nosuid",
                  "noexec",
                  "nodev"
              ]
          },
          {
              "destination": "/sys/fs/cgroup",
              "type": "cgroup",
              "source": "cgroup",
              "options": [
                  "nosuid",
                  "noexec",
                  "nodev",
                  "relatime",
                  "ro"
              ]
          },
          {
              "type": "bind",
              "source": "/etc/kubernetes",
              "destination": "/etc/kubernetes",
              "options": [
                  "rbind",
                  "ro",
                  "rprivate"
              ]
           },
           {
              "destination": "/etc/resolv.conf",
              "type": "bind",
              "source": "/etc/resolv.conf",
              "options": [
                  "ro",
                  "rbind",
                  "rprivate"
               ]
            },
            {
               "destination": "/var/run/kubernetes",
               "type": "bind",
               "source": "/var/run/kubernetes",
               "options": [
                   "rw",
                   "rbind"
                ]
            }
      ],
      "linux": {
          "resources": {
              "devices": [
                  {
                      "allow": false,
                      "access": "rwm"
                  }
              ]
          },
          "namespaces": [
              {
                  "type": "pid"
              },
              {
                  "type": "ipc"
              },
              {
                  "type": "mount"
              }
          ],
          "devices": null,
          "apparmorProfile": ""
      }
  }
  