adds examples for RunAsUser

Author: Amrita

modules/security-context-constraints-about.adoc

@@ -216,14 +216,60 @@ You can drop all capabilites from containers by setting the `requiredDropCapabil
 
 * `MustRunAs` - Requires a `runAsUser` to be configured. Uses the configured
 `runAsUser` as the default. Validates against the configured `runAsUser`.
+
++
+.Example `MustRunAs` snippet
+[source,yaml]
+----
+...
+runAsUser:
+  type: MustRunAs
+  uid: <id>
+...
+----
+
 * `MustRunAsRange` - Requires minimum and maximum values to be defined if not
 using pre-allocated values. Uses the minimum as the default. Validates against
 the entire allowable range.
+
++
+.Example `MustRunAsRange` snippet
+[source,yaml]
+----
+...
+runAsUser:
+  type: MustRunAsRange
+  uidRangeMax: <maxvalue>
+  uidRangeMin: <minvalue>
+...
+----
+
 * `MustRunAsNonRoot` - Requires that the pod be submitted with a non-zero
 `runAsUser` or have the `USER` directive defined in the image. No default
 provided.
+
++
+.Example `MustRunAsNonRoot` snippet
+[source,yaml]
+----
+...
+runAsUser:
+  type: MustRunAsNonRoot
+...
+----
+
 * `RunAsAny` - No default provided. Allows any `runAsUser` to be specified.
 
++
+.Example `RunAsAny` snippet
+[source,yaml]
+----
+...
+runAsUser:
+  type: RunAsAny
+...
+----
+
 .SELinuxContext
 
 * `MustRunAs` - Requires `seLinuxOptions` to be configured if not using