tpm-device-plugin-ds.yml

# Copyright 2023 Hedgehog SONiC Foundation
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
# 
# 	http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
#
# An initial version of the DaemonSet. Leaving it for an overview.
# Use the helm chart for a real installation.
apiVersion: apps/v1
kind: DaemonSet
metadata:
  name: tpm-device-plugin
  namespace: kube-system
spec:
  selector:
    matchLabels:
      name: tpm-device-plugin
  updateStrategy:
    type: RollingUpdate
  template:
    metadata:
      labels:
        name: tpm-device-plugin
    spec:
      priorityClassName: "system-node-critical"
      containers:
      - image: ghcr.io/githedgehog/k8s-tpm-device-plugin:latest
        imagePullPolicy: Always
        name: tpm-device-plugin
        securityContext:
          allowPrivilegeEscalation: false
          capabilities:
            drop: ["ALL"]
        volumeMounts:
        - name: device-plugins
          mountPath: /var/lib/kubelet/device-plugins
      volumes:
      - name: device-plugins
        hostPath:
          path: /var/lib/kubelet/device-plugins