apiVersion: policy/v1beta1 kind: PodSecurityPolicy metadata: annotations: falco-rules-psp-images: "[nginx]" name: no_host_network spec: hostNetwork: false