instruction: Create a Dockerfile for workloads
output: ```dockerfile
  from the optimization (i.e. set spec.securityContext.seLinuxChangePolicy: Recursive).Warning:We strongly recommend clusters that use SELinux to enable this controller and make sure that
  selinux_warning_controller_selinux_volume_conflict metric does not report any conflicts before enabling SELinuxMount
  feature gate or upgrading to a version where SELinuxMount is enabled by default.Feature gatesThe following feature gates control the behavior of SELinux volume relabeling:SELinuxMountReadWriteOncePod: enables the optimization for volumes with accessModes: ["ReadWriteOncePod"].
  This is a very safe feature gate to enable, as it cannot happen that two pods can share one single volume with
  this access mode. This feature gate is enabled by default sine v1.28.SELinuxChangePolicy: enables spec.securityContext.seLinuxChangePolicy field in Pod and related SELinuxWarningController
  in kube-controller-manager. This feature can be used before enabling SELinuxMount to check Pods running on a cluster,
  and to pro-actively opt-out Pods
  ```