X-Git-Url: https://gerrit.akraino.org/r/gitweb?a=blobdiff_plain;f=src%2Ffoundation%2Fscripts%2Fcni%2Fdanm%2Fintegration%2Fmanifests%2Fnetwatcher%2Fnetwatcher_ds.yaml;fp=src%2Ffoundation%2Fscripts%2Fcni%2Fdanm%2Fintegration%2Fmanifests%2Fnetwatcher%2Fnetwatcher_ds.yaml;h=3bfdf1061a11eebfefe5468d14c940d2c186373d;hb=92fa5a0e85848c61ac4fffc7bda774a01687c2ba;hp=0000000000000000000000000000000000000000;hpb=bcd84b3f9eea3c59d857cf2889fc943ebbe26443;p=iec.git

diff --git a/src/foundation/scripts/cni/danm/integration/manifests/netwatcher/netwatcher_ds.yaml b/src/foundation/scripts/cni/danm/integration/manifests/netwatcher/netwatcher_ds.yaml
new file mode 100644
index 0000000..3bfdf10
--- /dev/null
+++ b/src/foundation/scripts/cni/danm/integration/manifests/netwatcher/netwatcher_ds.yaml
@@ -0,0 +1,36 @@
+# yamllint disable rule:hyphens rule:commas rule:indentation
+apiVersion: apps/v1beta2
+kind: DaemonSet
+metadata:
+  name: netwatcher
+  namespace: kube-system
+spec:
+  selector:
+    matchLabels:
+      danm.k8s.io: netwatcher
+  template:
+    metadata:
+      labels:
+        danm.k8s.io: netwatcher
+    spec:
+      serviceAccount: netwatcher
+      hostNetwork: true
+      dnsPolicy: ClusterFirst
+      hostIPC: true
+      hostPID: true
+      containers:
+        - name: netwatcher
+          image: iecedge/netwatcher:v4.0.0
+          securityContext:
+            capabilities:
+              add:
+                - SYS_PTRACE
+                - SYS_ADMIN
+                - NET_ADMIN
+                - NET_RAW
+      tolerations:
+       - effect: NoSchedule
+         operator: Exists
+       - effect: NoExecute
+         operator: Exists
+      terminationGracePeriodSeconds: 0