nodecryptor/k8s/daemonset.yaml at main · NiklasBeierl/nodecryptor · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
apiVersion: apps/v1
kind: DaemonSet
metadata:
  name: nodecryptor
  namespace: kube-system
  labels:
    app: nodecryptor
spec:
  selector:
    matchLabels:
      app: nodecryptor
  template:
    metadata:
      labels:
        app: nodecryptor
    spec:
      serviceAccountName: nodecryptor
      hostNetwork: true
      containers:
        - name: nodecryptor
          image: ghcr.io/niklasbeierl/nodecryptor:latest
          imagePullPolicy: Always
          securityContext:
            capabilities:
              add:
                - NET_ADMIN
          env:
            - name: NODE_NAME
              valueFrom:
                fieldRef:
                  fieldPath: spec.nodeName
          args:
            - --noop-route
            - 10.0.0.255/32