// `/foo` would allow `/foo`, `/foo/` and `/foo/bar`
  // `/foo` would not allow `/food` or `/etc/foo`
  optional string pathPrefix = 1;

  // when set to true, will allow host volumes matching the pathPrefix only if all volume mounts are readOnly.
  // +optional
  optional bool readOnly = 2;
}

// Eviction evicts a pod from its node subject to certain policies and safety constraints.

  // +featureGate=InPlacePodVerticalScaling
  // +optional
  // +listType=atomic
  repeated ContainerResizePolicy resizePolicy = 23;

  // Pod volumes to mount into the container's filesystem. Subpath mounts are not allowed for ephemeral containers.
  // Cannot be updated.
  // +optional
  // +patchMergeKey=mountPath
  // +patchStrategy=merge
  repeated VolumeMount volumeMounts = 9;