Merge "Integrate Nokia/danm CNI into IEC"

[iec.git] / src / foundation / scripts / cni / danm / integration / manifests / netwatcher / netwatcher_ds.yaml

diff --git a/src/foundation/scripts/cni/danm/integration/manifests/netwatcher/netwatcher_ds.yaml b/src/foundation/scripts/cni/danm/integration/manifests/netwatcher/netwatcher_ds.yaml
new file mode 100644 (file)
index 0000000..3bfdf10
--- /dev/null
+++ b/src/foundation/scripts/cni/danm/integration/manifests/netwatcher/netwatcher_ds.yaml
@@ -0,0 +1,36 @@
+# yamllint disable rule:hyphens rule:commas rule:indentation
+apiVersion: apps/v1beta2
+kind: DaemonSet
+metadata:
+  name: netwatcher
+  namespace: kube-system
+spec:
+  selector:
+    matchLabels:
+      danm.k8s.io: netwatcher
+  template:
+    metadata:
+      labels:
+        danm.k8s.io: netwatcher
+    spec:
+      serviceAccount: netwatcher
+      hostNetwork: true
+      dnsPolicy: ClusterFirst
+      hostIPC: true
+      hostPID: true
+      containers:
+        - name: netwatcher
+          image: iecedge/netwatcher:v4.0.0
+          securityContext:
+            capabilities:
+              add:
+                - SYS_PTRACE
+                - SYS_ADMIN
+                - NET_ADMIN
+                - NET_RAW
+      tolerations:
+       - effect: NoSchedule
+         operator: Exists
+       - effect: NoExecute
+         operator: Exists
+      terminationGracePeriodSeconds: 0