Daemonset to replace Kata shim in a CoCo install

kata-ds.yaml

apiVersion: apps/v1
kind: DaemonSet
metadata:
  name: shim-copy-daemonset
  namespace: confidential-containers-system
spec:
  selector:
    matchLabels:
      app: shim-copy
  template:
    metadata:
      labels:
        app: shim-copy
    spec:
      serviceAccountName: default
      nodeSelector:
        node.kubernetes.io/worker: ""
      containers:
      - name: file-copy-container
        image: quay.io/bpradipt/kata-shim
        command: ["/bin/sh", "-c"]
        args:
          - |
            mv /opt/kata/bin/containerd-shim-kata-v2 /opt/kata/bin/containerd-shim-kata-v2.org
            cp /containerd-shim-kata-v2-coco /opt/kata/bin/containerd-shim-kata-v2
            chmod 0755 /opt/kata/bin/containerd-shim-kata-v2
            sleep infinity
        lifecycle:
          preStop:
            exec:
              command: ["/bin/sh", "-c", "mv /opt/kata/bin/containerd-shim-kata-v2.org /opt/kata/bin/containerd-shim-kata-v2"]
        volumeMounts:
        - name: host-volume
          mountPath: /opt
        securityContext:
          privileged: true
      volumes:
      - name: host-volume
        hostPath:
          path: /opt