bstein/titan-iac
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

maintenance: document rpi reservation privileges

Browse Source
This commit is contained in:
jenkins 2026-05-19 18:52:45 -03:00
parent 2464c61339
commit b7caf4cfec
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
services/maintenance/rpi-resource-reservation-daemonset.yaml
View File

@ -17,7 +17,7 @@ spec:
annotations: annotations:
atlas.bstein.dev/reservation-revision: "2026-05-19-5" atlas.bstein.dev/reservation-revision: "2026-05-19-5"
spec: spec:
hostPID: true hostPID: true # Needed for nsenter to run host systemd reloads after config writes.
serviceAccountName: node-nofile serviceAccountName: node-nofile
nodeSelector: nodeSelector:
node-role.kubernetes.io/worker: "true" node-role.kubernetes.io/worker: "true"
@ -57,7 +57,7 @@ spec:
cpu: 100m cpu: 100m
memory: 96Mi memory: 96Mi
securityContext: securityContext:
privileged: true privileged: true # Required to write host kubelet reservation files under /host.
runAsUser: 0 runAsUser: 0
volumeMounts: volumeMounts:
- name: host-root - name: host-root