apiVersion: apps/v1
kind: DaemonSet
metadata:
  name: intel-dsa-plugin
spec:
  template:
    spec:
      initContainers:
      - name: intel-idxd-config-initcontainer
        env:
          - name: NODE_NAME
            valueFrom:
              fieldRef:
                fieldPath: spec.nodeName
        image: intel/intel-idxd-config-initcontainer:0.30.0
        securityContext:
          seLinuxOptions:
            type: "container_device_plugin_init_t"
          readOnlyRootFilesystem: true
          privileged: true
        volumeMounts:
        - mountPath: /sys/bus/dsa
          name: sys-bus-dsa
        - mountPath: /sys/devices
          name: sys-devices
        - mountPath: /idxd-init/conf
          name: intel-dsa-config-volume
        - mountPath: /idxd-init/scratch
          name: scratch
      volumes:
      - name: sys-bus-dsa
        hostPath:
          path: /sys/bus/dsa
      - name: sys-devices
        hostPath:
          path: /sys/devices
      - name: intel-dsa-config-volume
        configMap:
          name: intel-dsa-config
      - name: scratch
        emptyDir: {}