},
			username: rootUser,
			fail:     false,
		},
		{
			desc: "Pass if RunAsNonRoot is false (WindowsOptions RunAsUserName is root)",
			sc: &v1.SecurityContext{
				RunAsNonRoot: &runAsNonRootFalse,
				WindowsOptions: &v1.WindowsSecurityContextOptions{
					RunAsUserName: &rootUser,
				},
			},
			username: rootUser,
			fail:     false,
		},
		{

	}
	// Verify that if runAsUserName is set for the pod and/or container that it is not set to 'ContainerAdministrator'
	if effectiveSc.WindowsOptions != nil {
		if effectiveSc.WindowsOptions.RunAsUserName != nil {
			if strings.EqualFold(*effectiveSc.WindowsOptions.RunAsUserName, windowsRootUserName) {

	if username != "" {
		wc.SecurityContext.RunAsUsername = username
	}
	if effectiveSc.WindowsOptions != nil &&
		effectiveSc.WindowsOptions.GMSACredentialSpec != nil {
		wc.SecurityContext.CredentialSpec = *effectiveSc.WindowsOptions.GMSACredentialSpec
	}

	// override with Windows options if present
	if effectiveSc.WindowsOptions != nil && effectiveSc.WindowsOptions.RunAsUserName != nil {

					SecurityContext: &v1.SecurityContext{
						WindowsOptions: &v1.WindowsSecurityContextOptions{
							GMSACredentialSpecName: &gmsaCredSpecName,
							GMSACredentialSpec:     &gmsaCredSpec,
							RunAsUserName:          &username,
							HostProcess:            &asHostProcess,
						},
					},
				},
			},
		},
	}

			effectiveSc.WindowsOptions.GMSACredentialSpec = containerSc.WindowsOptions.GMSACredentialSpec
		}
		if containerSc.WindowsOptions.RunAsUserName != nil {
			effectiveSc.WindowsOptions.RunAsUserName = containerSc.WindowsOptions.RunAsUserName
		}
		if containerSc.WindowsOptions.HostProcess != nil {
			effectiveSc.WindowsOptions.HostProcess = containerSc.WindowsOptions.HostProcess
		}
	}

              },
              "windowsOptions": {
                "gmsaCredentialSpecName": "gmsaCredentialSpecNameValue",
                "gmsaCredentialSpec": "gmsaCredentialSpecValue",
                "runAsUserName": "runAsUserNameValue",
                "hostProcess": true
              },
              "runAsUser": 4,
              "runAsGroup": 8,
              "runAsNonRoot": true,

              },
              "windowsOptions": {
                "gmsaCredentialSpecName": "gmsaCredentialSpecNameValue",
                "gmsaCredentialSpec": "gmsaCredentialSpecValue",
                "runAsUserName": "runAsUserNameValue",
                "hostProcess": true
              },
              "runAsUser": 4,
              "runAsGroup": 8,
              "runAsNonRoot": true,

            type: typeValue
          windowsOptions:
            gmsaCredentialSpec: gmsaCredentialSpecValue
            gmsaCredentialSpecName: gmsaCredentialSpecNameValue
            hostProcess: true
            runAsUserName: runAsUserNameValue
        startupProbe:
          exec:
            command:
            - commandValue
          failureThreshold: 6
          grpc:
            port: 1

          type: typeValue
        windowsOptions:
          gmsaCredentialSpec: gmsaCredentialSpecValue
          gmsaCredentialSpecName: gmsaCredentialSpecNameValue
          hostProcess: true
          runAsUserName: runAsUserNameValue
      startupProbe:
        exec:
          command:
          - commandValue
        failureThreshold: 6
        grpc:
          port: 1
          service: serviceValue

            type: typeValue
          windowsOptions:
            gmsaCredentialSpec: gmsaCredentialSpecValue
            gmsaCredentialSpecName: gmsaCredentialSpecNameValue
            hostProcess: true
            runAsUserName: runAsUserNameValue
        startupProbe:
          exec:
            command:
            - commandValue
          failureThreshold: 6
          grpc:
            port: 1