---
apiVersion: apps/v1
kind: DaemonSet
metadata:
  name: cuda-vectoradd
  annotations:
    checkov.io/skip1: CKV_K8S_40=OpenShift Injects Random UID
  namespace: nvidia-gpu-operator
spec:
  selector:
    matchLabels:
      name: cuda-vectoradd
  template:
    metadata:
      labels:
        name: cuda-vectoradd
    spec:
      automountServiceAccountToken: false
      tolerations:
        - effect: NoSchedule
          key: node-role.kubernetes.io/gpu
      dnsPolicy: ClusterFirst
      enableServiceLinks: false
      restartPolicy: Always
      schedulerName: default-scheduler
      nodeSelector:
        nvidia.com/gpu.present: "true"
      containers:
        - image: "nvcr.io/nvidia/k8s/cuda-sample:vectoradd-cuda11.7.1-ubuntu20.04@sha256:79fa5da2e71ce9169d41b0a67f8575b8f713fd1fb3e6de306774fcfede3a4fe6"
          imagePullPolicy: IfNotPresent
          name: smoke-test-keep-alive
          securityContext:
            capabilities:
              drop:
                - ALL
            privileged: false
            runAsNonRoot: true
            readOnlyRootFilesystem: true
            allowPrivilegeEscalation: false
            seccompProfile:
              type: RuntimeDefault
          command:
            - /bin/bash
            - -c
            - sleep infinity
          livenessProbe:
            exec:
              command:
                - nvidia-smi
                - -L
            initialDelaySeconds: 5
            periodSeconds: 10
          readinessProbe:
            exec:
              command:
                - nvidia-smi
                - -L
            initialDelaySeconds: 5
            periodSeconds: 10
          resources:
            requests:
              cpu: 10m
              memory: 128Mi
            limits:
              cpu: 100m
              memory: 256Mi
              nvidia.com/gpu: 1
          resizePolicy:
            - resourceName: cpu
              restartPolicy: NotRequired
            - resourceName: memory
              restartPolicy: NotRequired
      initContainers:
        - image: "nvcr.io/nvidia/k8s/cuda-sample:vectoradd-cuda11.7.1-ubuntu20.04@sha256:79fa5da2e71ce9169d41b0a67f8575b8f713fd1fb3e6de306774fcfede3a4fe6"
          imagePullPolicy: IfNotPresent
          name: cuda-vectoradd-smoke-test
          securityContext:
            allowPrivilegeEscalation: false
            capabilities:
              drop:
                - ALL
            privileged: false
            readOnlyRootFilesystem: true
            runAsNonRoot: true
            seccompProfile:
              type: RuntimeDefault
          resources:
            requests:
              cpu: 10m
              memory: 128Mi
            limits:
              cpu: 100m
              memory: 256Mi
              nvidia.com/gpu: 1