--- apiVersion: apps/v1 kind: DaemonSet metadata: name: kube-fetcher namespace: {{ .Release.Namespace }} spec: selector: matchLabels: app: kube-fetcher template: metadata: labels: app: kube-fetcher spec: serviceAccountName: kube-fetcher containers: - name: fetcher image: cat.wamblee.org/kube-fetcher:1.0.0 imagePullPolicy: Always env: - name: NODE_NAME valueFrom: fieldRef: fieldPath: spec.nodeName securityContext: privileged: true runAsUser: 0 args: - --ready-duration={{ .Values.readyDuration }} - --v={{ .Values.logLevel }} {{- if .Values.initialPullAll }} - --initial-pull-all {{- end }} {{- range $mirror := .Values.mirrors }} - --mirror - {{ $mirror.registry }}={{ $mirror.mirror }} {{- end }} volumeMounts: - mountPath: /run/containerd/containerd.sock name: containerd-sock volumes: - name: containerd-sock hostPath: path: /run/containerd/containerd.sock type: Socket