# Copyright 2020 Intel Corporation
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
#     http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.

apiVersion: apps/v1
kind: Deployment
metadata:
  name: avalon-sgx-enclave-manager
spec:
  replicas: 1
  selector:
    matchLabels:
      app: sgx-enclave-manager
  template:
    metadata:
      name: sgx-enclave-manager
      labels:
        app: sgx-enclave-manager
    spec:
      containers:
      - image: avalon-sgx-enclave-manager-dev:latest
        name: sgx-enclave-manager
        imagePullPolicy: Never
        volumeMounts:
        - mountPath: /dev/isgx
          name: isgx
        - mountPath: /var/run/aesmd/aesm.socket
          name: aesmsocket
        securityContext:
          privileged: true
        command: ["/bin/bash"]
        args: ["-c", "enclave_manager --lmdb_url http://avalon-lmdb:9090"]
      volumes:
      - name: isgx
        hostPath:
          path: /dev/isgx
          type: CharDevice
      - name: aesmsocket
        hostPath:
          path: /var/run/aesmd/aesm.socket
          type: Socket
