intel-device-plugins-for-ku.../deployments/sgx_enclave_apps/base/intelsgx-job.yaml
Ed Bartosh 13780a8cdc implement terrascan check
Signed-off-by: Ed Bartosh <eduard.bartosh@intel.com>
2022-03-01 15:54:28 +02:00

29 lines
733 B
YAML

apiVersion: batch/v1
kind: Job
metadata:
name: intelsgx-demo-job
labels:
jobgroup: intelsgx-demo
spec:
template:
metadata:
labels:
jobgroup: intelsgx-demo
spec:
restartPolicy: Never
containers:
-
name: intelsgx-demo-job-1
image: intel/sgx-sdk-demo:devel
imagePullPolicy: IfNotPresent
workingDir: "/opt/intel/sgx-sample-app/"
command: ["/opt/intel/sgx-sample-app/sgx-sample-app"]
securityContext:
readOnlyRootFilesystem: true
allowPrivilegeEscalation: false
capabilities:
add: ["IPC_LOCK"]
resources:
limits:
sgx.intel.com/epc: "512Ki"