intel-device-plugins-for-ku.../deployments/sgx_enclave_apps/base/intelsgx-job.yaml
Mikko Ylinen a8105befe0 demo: kustomize sgx sample deployments
adding kustomization to deploy sample jobs that demonstrate

1. launching of plain sample enclave application
2. SGX ECDSA quote generation "out-of-proc" using aesmd
3. SGX ECDSA quote generation "in-proc"

Signed-off-by: Mikko Ylinen <mikko.ylinen@intel.com>
2020-10-27 15:02:40 +02:00

28 lines
689 B
YAML

apiVersion: batch/v1
kind: Job
metadata:
name: intelsgx-demo-job
labels:
jobgroup: intelsgx-demo
spec:
template:
metadata:
labels:
jobgroup: intelsgx-demo
spec:
restartPolicy: Never
containers:
-
name: intelsgx-demo-job-1
image: intel/sgx-sdk-demo:devel
imagePullPolicy: IfNotPresent
workingDir: "/opt/intel/sgx-sample-app/"
command: ["/opt/intel/sgx-sample-app/sgx-sample-app"]
securityContext:
readOnlyRootFilesystem: true
capabilities:
add: ["IPC_LOCK"]
resources:
limits:
sgx.intel.com/epc: "512Ki"