---
pod:
  mandatory_access_control:
    type: apparmor
    filebeat:
      filebeat: runtime/default
      init: runtime/default
...