apiVersion: apps/v1
kind: DaemonSet
metadata:
  name: kured-toujours
  namespace: kube-system
  labels:
    k8s-app: kured-toujours
spec:
  selector:
    matchLabels:
      name: kured-toujours
  template:
    metadata:
      labels:
        name: kured-toujours
    spec:
      hostPID: true # Facilitate entering the host mount namespace via init
      containers:
      - name: kured-toujours
        image: barpilot/kured-toujours:0.0.2
        args: ["--period", "168h"]
        securityContext:
          privileged: true # Give permission to nsenter /proc/1/ns/mnt
        resources:
          limits:
            memory: 20Mi
          requests:
            cpu: 10m
            memory: 5Mi
