netshoot.yaml

netshoot.yaml

---
apiVersion: apps/v1
kind: DaemonSet
metadata:
  name: netshoot
  labels:
    app: netshoot
spec:
  updateStrategy:
    type: RollingUpdate
  selector:
    matchLabels:
      app: netshoot
  template:
    metadata:
      labels:
        app: netshoot
    spec:
      tolerations:
      - effect: NoSchedule
        operator: Exists
      - effect: NoExecute
        operator: Exists
      - key: CriticalAddonsOnly
        operator: Exists
      - effect: NoExecute
        key: node.kubernetes.io/not-ready
        operator: Exists
      - effect: NoExecute
        key: node.kubernetes.io/unreachable
        operator: Exists
      - effect: NoSchedule
        key: node.kubernetes.io/disk-pressure
        operator: Exists
      - effect: NoSchedule
        key: node.kubernetes.io/memory-pressure
        operator: Exists
      - effect: NoSchedule
        key: node.kubernetes.io/pid-pressure
        operator: Exists
      - effect: NoSchedule
        key: node.kubernetes.io/unschedulable
        operator: Exists
      - effect: NoSchedule
        key: node.kubernetes.io/network-unavailable
        operator: Exists
      securityContext:
        runAsNonRoot: true
        runAsUser: 1000
        fsGroup: 2000
      # if you'd like to use a secret to inject a kubeconfig, you can do it like this
      containers:
        - name: netshoot
          image: "docker.io/nicolaka/netshoot"
          imagePullPolicy: Always
          securityContext:
            privileged: true
          tty: true
          stdin: true
          stdinOnce: true