apiVersion: v1
kind: Pod
metadata:
  name: cis-worker
  namespace: chaos
spec:
  restartPolicy: Never
  containers:
  - name: cis-worker
    image: localhost:5000/cispod:local
    args: ["4.1.5"]
    imagePullPolicy: Always
    securityContext:
      privileged: true
    volumeMounts:
    - mountPath: "/kubelet-service"
      name: kubelet-service
    - mountPath: "/kubeadm"
      name: kubeadm-dir
    - mountPath: "/kubelet"
      name: kubelet
  volumes:
      - name: kubelet-service
        hostPath:
            path: "/etc/systemd/system/kubelet.service.d"
            type: Directory
      - name: kubeadm-dir
        hostPath:
          path: "/etc/kubernetes"
          type: Directory
      - name: kubelet
        hostPath:
            path: "/var/lib/kubelet"
            type: Directory
