titan-iac/services/maintenance/metis-sentinel-arm64-daemonset.yaml
2026-04-24 20:19:26 +00:00

49 lines
1.3 KiB
YAML

# services/maintenance/metis-sentinel-arm64-daemonset.yaml
apiVersion: apps/v1
kind: DaemonSet
metadata:
name: metis-sentinel-arm64
namespace: maintenance
spec:
selector:
matchLabels:
app: metis-sentinel-arm64
updateStrategy:
type: RollingUpdate
rollingUpdate:
maxUnavailable: 25%
template:
metadata:
labels:
app: metis-sentinel-arm64
spec:
automountServiceAccountToken: false
hostPID: true
tolerations:
- key: node-role.kubernetes.io/control-plane
operator: Exists
effect: NoSchedule
- key: node-role.kubernetes.io/master
operator: Exists
effect: NoSchedule
nodeSelector:
kubernetes.io/os: linux
kubernetes.io/arch: arm64
containers:
- name: metis-sentinel
image: registry.bstein.dev/bstein/metis-sentinel:0.1.0-100-arm64 # {"$imagepolicy": "maintenance:metis-sentinel-arm64"}
imagePullPolicy: Always
envFrom:
- configMapRef:
name: metis
resources:
requests:
cpu: 10m
memory: 32Mi
limits:
cpu: 100m
memory: 128Mi
securityContext:
privileged: true
runAsUser: 0