apiVersion: policy/v1beta1
kind: PodSecurityPolicy
metadata:
  annotations:
    falco-rules-psp-images: "[nginx]"
  name: supplemental_groups_must_run_as_30_10
spec:
  supplementalGroups:
    rule: "MustRunAs"
    ranges:
      - min: 30
        max: 40
      - min: 10
        max: 15
