# An ordinary (non-sandboxed) pod with its own EBS volume, for the side-by-side in Step 3:
# it mounts the same kind of volume and sees it as an nvme device, where the sandboxed pod
# sees a virtio /dev/vd* device for the same kind of volume. It has its own claim so it does
# not contend with the sandboxed pod's ReadWriteOncePod volume. Bind it through the same
# class the run used (the page fills <STORAGE_CLASS> in with sed). Apply it only for the
# comparison, and delete it and its claim afterwards:
#   kubectl delete -f deploy/pod-ordinary.yaml -n "$NAMESPACE"
#   kubectl delete pvc ordinary-ebs-data -n "$NAMESPACE"
---
apiVersion: v1
kind: PersistentVolumeClaim
metadata:
  name: ordinary-ebs-data
spec:
  accessModes:
    - ReadWriteOncePod
  storageClassName: <STORAGE_CLASS>
  resources:
    requests:
      storage: 10Gi
---
apiVersion: v1
kind: Pod
metadata:
  name: ordinary-pod
spec:
  # No runtimeClassName: an ordinary pod that shares the node kernel.
  containers:
    - name: writer
      image: public.ecr.aws/docker/library/busybox:1.37
      imagePullPolicy: IfNotPresent
      command: ["sh", "-c", "df -hT /data; ls /sys/block; sleep 3600"]
      volumeMounts:
        - name: data
          mountPath: /data
  volumes:
    - name: data
      persistentVolumeClaim:
        claimName: ordinary-ebs-data