- macro: allowed_k8s_containers
  condition: (ka.req.container.image.repository=nginx)