kata-cleanup.yaml

---
apiVersion: apps/v1
kind: DaemonSet
metadata:
  name: kubelet-cri-o-kata-cleanup
  namespace: kube-system
spec:
  selector:
      matchLabels:
        name: kubelet-cri-o-kata-cleanup
  template:
    metadata:
        labels:
          name: kubelet-cri-o-kata-cleanup
    spec:
      serviceAccountName: kata-label-node
      nodeSelector:
          container-runtime: cri-o
          kata-runtime: cleanup
      containers:
      - name: kube-kata-cleanup
        image: egernst/kata-deploy
        imagePullPolicy: Always
        command: [ "sh", "-c" ]
        args:
        - kubectl label node $NODE_NAME container-runtime- kata-runtime-;
          systemctl daemon-reload && systemctl restart crio && systemctl restart kubelet;
          while true;
          do sleep 36000; done;
        env:
        - name: NODE_NAME
          valueFrom:
            fieldRef:
              fieldPath: spec.nodeName
        securityContext:
          privileged: false
  updateStrategy:
    rollingUpdate:
      maxUnavailable: 1
    type: RollingUpdate
---
apiVersion: apps/v1
kind: DaemonSet
metadata:
  name: kubelet-containerd-kata-cleanup
  namespace: kube-system
spec:
  selector:
      matchLabels:
        name: kubelet-containerd-kata-cleanup
  template:
    metadata:
        labels:
          name: kubelet-containerd-kata-cleanup
    spec:
      serviceAccountName: kata-label-node
      nodeSelector:
          container-runtime: containerd
          kata-runtime: cleanup
      containers:
      - name: kube-kata-cleanup
        image: egernst/kata-deploy
        imagePullPolicy: Always
        command: [ "sh", "-c" ]
        args:
        - kubectl label node $NODE_NAME container-runtime- kata-runtime-;
          systemctl daemon-reload && systemctl restart containerd && systemctl restart kubelet;
          while true;
          do sleep 36000; done;
        env:
        - name: NODE_NAME
          valueFrom:
            fieldRef:
              fieldPath: spec.nodeName
        securityContext:
          privileged: false
  updateStrategy:
    rollingUpdate:
      maxUnavailable: 1
    type: RollingUpdate