intel-sgx-plugin.yaml

apiVersion: apps/v1
kind: DaemonSet
metadata:
  name: intel-sgx-plugin
  labels:
    app: intel-sgx-plugin
spec:
  selector:
    matchLabels:
      app: intel-sgx-plugin
  template:
    metadata:
      labels:
        app: intel-sgx-plugin
    spec:
      initContainers:
      - name: intel-sgx-initcontainer
        image: intel/intel-sgx-initcontainer:devel
        imagePullPolicy: IfNotPresent
        securityContext:
          readOnlyRootFilesystem: true
        volumeMounts:
        - mountPath: /etc/kubernetes/node-feature-discovery/source.d/
          name: nfd-source-hooks
      containers:
      - name: intel-sgx-plugin
        image: intel/intel-sgx-plugin:devel
        securityContext:
          readOnlyRootFilesystem: true
        imagePullPolicy: IfNotPresent
        volumeMounts:
        - name: kubeletsockets
          mountPath: /var/lib/kubelet/device-plugins
        - name: sgxdevices
          mountPath: /dev/sgx
          readOnly: true
      volumes:
      - name: kubeletsockets
        hostPath:
          path: /var/lib/kubelet/device-plugins
      - name: sgxdevices
        hostPath:
          path: /dev/sgx
      - name: nfd-source-hooks
        hostPath:
          path: /etc/kubernetes/node-feature-discovery/source.d/
          type: DirectoryOrCreate