cri-o/test/testdata/sandbox_config.json

{
	"metadata": {
		"name": "podsandbox1",
		"uid": "redhat-test-ocid",
		"namespace": "redhat.test.ocid",
		"attempt": 1
	},
	"hostname": "ocic_host",
	"log_directory": ".",
	"dns_options": {
		"servers": [
			"server1.redhat.com",
			"server2.redhat.com"
		],
		"searches": [
			"8.8.8.8"
		]
	},
	"port_mappings": [
		{
			"name": "port_map1",
			"protocol": 1,
			"container_port": 80,
			"host_port": 4888,
			"host_ip": "192.168.0.33"
		},
		{
			"name": "port_map2",
			"protocol": 2,
			"container_port": 81,
			"host_port": 4889,
			"host_ip": "192.168.0.33"
		}
	],
	"resources": {
		"cpu": {
			"limits": 3,
			"requests": 2
		},
		"memory": {
			"limits": 50000000,
			"requests": 2000000
		}
	},
	"labels": {
		"group": "test"
	},
	"annotations": {
		"owner": "hmeng",
		"security.alpha.kubernetes.io/sysctls": "kernel.shm_rmid_forced=1,net.ipv4.ip_local_port_range=1024 65000",
		"security.alpha.kubernetes.io/unsafe-sysctls": "kernel.msgmax=8192" ,
		"security.alpha.kubernetes.io/seccomp/pod": "unconfined"
	},
	"linux": {
		"cgroup_parent": "podsandbox1.slice:container:infra",
		"security_context": {
			"namespace_options": {
				"host_network": false,
				"host_pid": false,
				"host_ipc": false
			}
		}
	}
}