intel-device-plugins-for-kubernetes/deployments/xpumanager_sidecar/kustom/kustom_xpumanager.yaml

apiVersion: apps/v1
kind: DaemonSet
metadata:
  labels:
    app: intel-xpumanager
  name: intel-xpumanager
spec:
  template:
    spec:
      volumes:
        - name: features-d
          hostPath:
            path: "/etc/kubernetes/node-feature-discovery/features.d/"
      containers:
      - name: xelink-sidecar
        image: intel/intel-xpumanager-sidecar:0.30.0
        imagePullPolicy: Always
        args:
          - -v=2
        volumeMounts:
        - name: features-d
          mountPath: "/etc/kubernetes/node-feature-discovery/features.d/"
        securityContext:
          allowPrivilegeEscalation: false
          capabilities:
            drop:
            - ALL
          readOnlyRootFilesystem: true
          runAsUser: 0