-
Notifications
You must be signed in to change notification settings - Fork 3
/
privileged-pod.yaml
42 lines (41 loc) · 1.01 KB
/
privileged-pod.yaml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
## Replace name with your desired name and image with your container.
apiVersion: v1
kind: Pod
metadata:
name: nfs-privileged
spec:
containers:
- name: privileged
image: tag/privileged-container
ports:
- containerPort: 80
securityContext:
privileged: true
volumeMounts:
- mountPath: /nfs
name: mountpoint-dir
mountPropagation: Bidirectional
- mountPath: /run/rpc_pipefs
name: rpc-pipefs
mountPropagation: Bidirectional
- mountPath: /etc/krb5.keytab
name: keytab
readOnly: true
- mountPath: /tmp
name: tmp
volumes:
- hostPath:
path: /var/lib/kubelet/plugins/kubernetes.io/csi/pv/pvc-123/globalmount
type: DirectoryOrCreate
name: mountpoint-dir
- hostPath:
path: /etc/krb5.keytab
name: keytab
- hostPath:
path: /run/rpc_pipefs
type: DirectoryOrCreate
name: rpc-pipefs
- hostPath:
path: /tmp
type: DirectoryOrCreate
name: tmp