apiVersion: v1 kind: Namespace metadata: name: kbird-system labels: app: kbird --- apiVersion: v1 kind: ConfigMap metadata: namespace: kbird-system name: config data: bird.conf: | log stderr all; protocol device { } --- apiVersion: apps/v1beta2 kind: DaemonSet metadata: metadata: namespace: kbird-system name: kbird spec: selector: matchLabels: app: kbird template: metadata: labels: app: kbird spec: terminationGracePeriodSeconds: 0 hostNetwork: true containers: - name: kbird image: mhristache/kbird:0.1 imagePullPolicy: IfNotPresent tty: true volumeMounts: - name: config mountPath: /config securityContext: privileged: true capabilities: drop: - all add: - net_raw - net_admin volumes: - name: config configMap: name: config items: - path: bird.conf key: bird.conf