intel-device-plugins-for-ku.../deployments/dlb_plugin/base/intel-dlb-plugin.yaml
Mikko Ylinen 8c0abb54b1 deployments: disable unused serviceAccounts for plugins
Signed-off-by: Mikko Ylinen <mikko.ylinen@intel.com>
2022-09-23 08:21:25 +03:00

51 lines
1.2 KiB
YAML

apiVersion: apps/v1
kind: DaemonSet
metadata:
name: intel-dlb-plugin
labels:
app: intel-dlb-plugin
spec:
selector:
matchLabels:
app: intel-dlb-plugin
template:
metadata:
labels:
app: intel-dlb-plugin
spec:
automountServiceAccountToken: false
containers:
- name: intel-dlb-plugin
env:
- name: NODE_NAME
valueFrom:
fieldRef:
fieldPath: spec.nodeName
image: intel/intel-dlb-plugin:devel
imagePullPolicy: IfNotPresent
securityContext:
readOnlyRootFilesystem: true
allowPrivilegeEscalation: false
terminationMessagePath: /tmp/termination-log
volumeMounts:
- name: devfs
mountPath: /dev
readOnly: true
- name: sysfs
mountPath: /sys/class/dlb2
readOnly: true
- name: kubeletsockets
mountPath: /var/lib/kubelet/device-plugins
volumes:
- name: devfs
hostPath:
path: /dev
- name: sysfs
hostPath:
path: /sys/class/dlb2
- name: kubeletsockets
hostPath:
path: /var/lib/kubelet/device-plugins
nodeSelector:
kubernetes.io/arch: amd64