mirror of
https://github.com/intel/intel-device-plugins-for-kubernetes.git
synced 2025-06-03 03:59:37 +00:00
50 lines
1.2 KiB
YAML
50 lines
1.2 KiB
YAML
apiVersion: apps/v1
|
|
kind: DaemonSet
|
|
metadata:
|
|
name: intel-sgx-plugin
|
|
labels:
|
|
app: intel-sgx-plugin
|
|
spec:
|
|
selector:
|
|
matchLabels:
|
|
app: intel-sgx-plugin
|
|
template:
|
|
metadata:
|
|
labels:
|
|
app: intel-sgx-plugin
|
|
spec:
|
|
containers:
|
|
- name: intel-sgx-plugin
|
|
image: intel/intel-sgx-plugin:devel
|
|
securityContext:
|
|
readOnlyRootFilesystem: true
|
|
imagePullPolicy: IfNotPresent
|
|
volumeMounts:
|
|
- name: kubeletsockets
|
|
mountPath: /var/lib/kubelet/device-plugins
|
|
- name: sgxdevices
|
|
mountPath: /dev/sgx
|
|
readOnly: true
|
|
- name: sgx-enclave
|
|
mountPath: /dev/sgx_enclave
|
|
readOnly: true
|
|
- name: sgx-provision
|
|
mountPath: /dev/sgx_provision
|
|
readOnly: true
|
|
volumes:
|
|
- name: kubeletsockets
|
|
hostPath:
|
|
path: /var/lib/kubelet/device-plugins
|
|
- name: sgxdevices
|
|
hostPath:
|
|
path: /dev/sgx
|
|
type: DirectoryOrCreate
|
|
- name: sgx-enclave
|
|
hostPath:
|
|
path: /dev/sgx_enclave
|
|
type: CharDevice
|
|
- name: sgx-provision
|
|
hostPath:
|
|
path: /dev/sgx_provision
|
|
type: CharDevice
|