spec:
  containers:
  - command:
    - kube-apiserver
    - --authorization-mode=AlwaysAllow
    - --enable-admission-plugins=NamespaceLifecycle
