如何在kubernetes清单文件中以nosuid挂载卷

apiVersion: v1
kind: Pod
metadata:
  name: my-pod
spec:
  containers:
    - name: my-container
      image: my-image
      volumeMounts:
        - name: my-volume
          mountPath: /path/to/mount
  volumes:
    - name: my-volume
      emptyDir: {}
  securityContext:
    runAsUser: 1000
    runAsGroup: 1000
    fsGroup: 2000
    supplementalGroups: [3000]
    seLinuxOptions:
      level: s0:c123,c456
    sysctls:
      - name: fs.protected_hardlinks
        value: "1"
      - name: fs.protected_symlinks
        value: "1"
    allowPrivilegeEscalation: false
    readOnlyRootFilesystem: true
    capabilities:
      drop:
        - ALL
      add:
        - NET_ADMIN