Merge pull request #197 from marquiz/devel/plugin-images-kustomize

klihub · web-flow · commit 5cf60ebcd899 · 2025-08-14T15:24:26.000+03:00
deployment: add minimal kustomize overlays for deploying plugins
diff --git a/contrib/kustomize/components/image-stable/kustomization.yaml b/contrib/kustomize/components/image-stable/kustomization.yaml
@@ -0,0 +1,12 @@
+apiVersion: kustomize.config.k8s.io/v1alpha1
+kind: Component
+images:
+  - name: '*'
+    newTag: v0.10.0
+patches:
+  - target:
+      kind: DaemonSet
+    patch: |
+      - op: replace
+        path: /spec/template/spec/containers/0/imagePullPolicy
+        value: IfNotPresent
diff --git a/contrib/kustomize/components/image-unstable/kustomization.yaml b/contrib/kustomize/components/image-unstable/kustomization.yaml
@@ -0,0 +1,12 @@
+apiVersion: kustomize.config.k8s.io/v1alpha1
+kind: Component
+images:
+  - name: '*'
+    newTag: unstable
+patches:
+  - target:
+      kind: DaemonSet
+    patch: |
+      - op: replace
+        path: /spec/template/spec/containers/0/imagePullPolicy
+        value: Always
diff --git a/contrib/kustomize/device-injector/base/daemonset.yaml b/contrib/kustomize/device-injector/base/daemonset.yaml
@@ -0,0 +1,31 @@
+apiVersion: apps/v1
+kind: DaemonSet
+metadata:
+  name: nri-plugin-device-injector
+spec:
+  template:
+    spec:
+      priorityClassName: system-node-critical
+      containers:
+        - name: plugin
+          image: plugin:latest
+          args:
+            - "-idx"
+            - "10"
+          resources:
+            requests:
+              cpu: "2m"
+              memory: "5Mi"
+          securityContext:
+            allowPrivilegeEscalation: false
+            capabilities:
+              drop:
+                - ALL
+          volumeMounts:
+            - name: nri-socket
+              mountPath: /var/run/nri/nri.sock
+      volumes:
+        - name: nri-socket
+          hostPath:
+            path: /var/run/nri/nri.sock
+            type: Socket
diff --git a/contrib/kustomize/device-injector/base/kustomization.yaml b/contrib/kustomize/device-injector/base/kustomization.yaml
@@ -0,0 +1,12 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+namespace: kube-system
+resources:
+  - daemonset.yaml
+images:
+  - name: plugin
+    newName: ghcr.io/containerd/nri/plugins/device-injector
+labels:
+  - includeSelectors: true
+    pairs:
+      app.kubernetes.io/name: nri-plugin-device-injector
diff --git a/contrib/kustomize/device-injector/kustomization.yaml b/contrib/kustomize/device-injector/kustomization.yaml
@@ -0,0 +1,6 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - base/
+components:
+  - ../components/image-stable
diff --git a/contrib/kustomize/device-injector/unstable/kustomization.yaml b/contrib/kustomize/device-injector/unstable/kustomization.yaml
@@ -0,0 +1,6 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - ../base/
+components:
+  - ../../components/image-unstable
diff --git a/contrib/kustomize/differ/base/daemonset.yaml b/contrib/kustomize/differ/base/daemonset.yaml
@@ -0,0 +1,28 @@
+apiVersion: apps/v1
+kind: DaemonSet
+metadata:
+  name: nri-plugin-differ
+spec:
+  template:
+    spec:
+      containers:
+        - name: plugin
+          image: plugin:latest
+          args: []
+          resources:
+            requests:
+              cpu: "2m"
+              memory: "5Mi"
+          securityContext:
+            allowPrivilegeEscalation: false
+            capabilities:
+              drop:
+                - ALL
+          volumeMounts:
+            - name: nri-socket
+              mountPath: /var/run/nri/nri.sock
+      volumes:
+        - name: nri-socket
+          hostPath:
+            path: /var/run/nri/nri.sock
+            type: Socket
diff --git a/contrib/kustomize/differ/base/kustomization.yaml b/contrib/kustomize/differ/base/kustomization.yaml
@@ -0,0 +1,12 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+namespace: kube-system
+resources:
+  - daemonset.yaml
+images:
+  - name: plugin
+    newName: ghcr.io/containerd/nri/plugins/differ
+labels:
+  - includeSelectors: true
+    pairs:
+      app.kubernetes.io/name: nri-plugin-device-injector
diff --git a/contrib/kustomize/differ/kustomization.yaml b/contrib/kustomize/differ/kustomization.yaml
@@ -0,0 +1,6 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - base/
+components:
+  - ../components/image-stable
diff --git a/contrib/kustomize/differ/unstable/kustomization.yaml b/contrib/kustomize/differ/unstable/kustomization.yaml
@@ -0,0 +1,6 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - ../base/
+components:
+  - ../../components/image-unstable
diff --git a/contrib/kustomize/hook-injector/base/daemonset.yaml b/contrib/kustomize/hook-injector/base/daemonset.yaml
@@ -0,0 +1,52 @@
+apiVersion: apps/v1
+kind: DaemonSet
+metadata:
+  name: nri-plugin-hook-injector
+spec:
+  template:
+    spec:
+      priorityClassName: system-node-critical
+      containers:
+        - name: plugin
+          image: plugin:latest
+          args:
+            - "-idx"
+            - "10"
+          resources:
+            requests:
+              cpu: "2m"
+              memory: "5Mi"
+          securityContext:
+            allowPrivilegeEscalation: false
+            capabilities:
+              drop:
+                - ALL
+          volumeMounts:
+            - name: nri-socket
+              mountPath: /var/run/nri/nri.sock
+            - name: etc-hooks-d
+              mountPath: /etc/containers/oci/hooks.d
+              readOnly: true
+            - name: usr-share-hooks-d
+              mountPath: /usr/share/containers/oci/hooks.d
+              readOnly: true
+            - name: libexec-hooks-d
+              mountPath: /usr/libexec/oci/hooks.d
+              readOnly: true
+      volumes:
+        - name: nri-socket
+          hostPath:
+            path: /var/run/nri/nri.sock
+            type: Socket
+        - name: etc-hooks-d
+          hostPath:
+            path: /etc/containers/oci/hooks.d
+            type: DirectoryOrCreate
+        - name: usr-share-hooks-d
+          hostPath:
+            path: /usr/share/containers/oci/hooks.d
+            type: DirectoryOrCreate
+        - name: libexec-hooks-d
+          hostPath:
+            path: /usr/libexec/oci/hooks.d
+            type: DirectoryOrCreate
diff --git a/contrib/kustomize/hook-injector/base/kustomization.yaml b/contrib/kustomize/hook-injector/base/kustomization.yaml
@@ -0,0 +1,12 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+namespace: kube-system
+resources:
+  - daemonset.yaml
+images:
+  - name: plugin
+    newName: ghcr.io/containerd/nri/plugins/hook-injector
+labels:
+  - includeSelectors: true
+    pairs:
+      app.kubernetes.io/name: nri-plugin-hook-injector
diff --git a/contrib/kustomize/hook-injector/kustomization.yaml b/contrib/kustomize/hook-injector/kustomization.yaml
@@ -0,0 +1,6 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - base/
+components:
+  - ../components/image-stable
diff --git a/contrib/kustomize/hook-injector/unstable/kustomization.yaml b/contrib/kustomize/hook-injector/unstable/kustomization.yaml
@@ -0,0 +1,6 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - ../base/
+components:
+  - ../../components/image-unstable
diff --git a/contrib/kustomize/logger/base/daemonset.yaml b/contrib/kustomize/logger/base/daemonset.yaml
@@ -0,0 +1,32 @@
+apiVersion: apps/v1
+kind: DaemonSet
+metadata:
+  name: nri-plugin-logger
+spec:
+  template:
+    spec:
+      containers:
+        - name: plugin
+          image: plugin:latest
+          args:
+            - "-idx"
+            - "10"
+            - "-events"
+            - "RunPodSandbox,StopPodSandbox,RemovePodSandbox,CreateContainer,PostCreateContainer,StartContainer,PostStartContainer,UpdateContainer,PostUpdateContainer,StopContainer,RemoveContainer"
+          resources:
+            requests:
+              cpu: "2m"
+              memory: "5Mi"
+          securityContext:
+            allowPrivilegeEscalation: false
+            capabilities:
+              drop:
+                - ALL
+          volumeMounts:
+            - name: nri-socket
+              mountPath: /var/run/nri/nri.sock
+      volumes:
+        - name: nri-socket
+          hostPath:
+            path: /var/run/nri/nri.sock
+            type: Socket
diff --git a/contrib/kustomize/logger/base/kustomization.yaml b/contrib/kustomize/logger/base/kustomization.yaml
@@ -0,0 +1,12 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+namespace: kube-system
+resources:
+  - daemonset.yaml
+images:
+  - name: plugin
+    newName: ghcr.io/containerd/nri/plugins/logger
+labels:
+  - includeSelectors: true
+    pairs:
+      app.kubernetes.io/name: nri-plugin-logger
diff --git a/contrib/kustomize/logger/kustomization.yaml b/contrib/kustomize/logger/kustomization.yaml
@@ -0,0 +1,6 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - base/
+components:
+  - ../components/image-stable
diff --git a/contrib/kustomize/logger/unstable/kustomization.yaml b/contrib/kustomize/logger/unstable/kustomization.yaml
@@ -0,0 +1,6 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - ../base/
+components:
+  - ../../components/image-unstable
diff --git a/contrib/kustomize/network-device-injector/base/daemonset.yaml b/contrib/kustomize/network-device-injector/base/daemonset.yaml
@@ -0,0 +1,31 @@
+apiVersion: apps/v1
+kind: DaemonSet
+metadata:
+  name: nri-plugin-network-device-injector
+spec:
+  template:
+    spec:
+      priorityClassName: system-node-critical
+      containers:
+        - name: plugin
+          image: plugin:latest
+          args:
+            - "-idx"
+            - "10"
+          resources:
+            requests:
+              cpu: "2m"
+              memory: "5Mi"
+          securityContext:
+            allowPrivilegeEscalation: false
+            capabilities:
+              drop:
+                - ALL
+          volumeMounts:
+            - name: nri-socket
+              mountPath: /var/run/nri/nri.sock
+      volumes:
+        - name: nri-socket
+          hostPath:
+            path: /var/run/nri/nri.sock
+            type: Socket
diff --git a/contrib/kustomize/network-device-injector/base/kustomization.yaml b/contrib/kustomize/network-device-injector/base/kustomization.yaml
@@ -0,0 +1,12 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+namespace: kube-system
+resources:
+  - daemonset.yaml
+images:
+  - name: plugin
+    newName: ghcr.io/containerd/nri/plugins/network-device-injector
+labels:
+  - includeSelectors: true
+    pairs:
+      app.kubernetes.io/name: nri-plugin-network-device-injector
diff --git a/contrib/kustomize/network-device-injector/kustomization.yaml b/contrib/kustomize/network-device-injector/kustomization.yaml
@@ -0,0 +1,6 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - base/
+components:
+  - ../components/image-stable
diff --git a/contrib/kustomize/network-device-injector/unstable/kustomization.yaml b/contrib/kustomize/network-device-injector/unstable/kustomization.yaml
@@ -0,0 +1,6 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - ../base/
+components:
+  - ../../components/image-unstable
diff --git a/contrib/kustomize/network-logger/base/daemonset.yaml b/contrib/kustomize/network-logger/base/daemonset.yaml
@@ -0,0 +1,30 @@
+apiVersion: apps/v1
+kind: DaemonSet
+metadata:
+  name: nri-plugin-network-logger
+spec:
+  template:
+    spec:
+      containers:
+        - name: plugin
+          image: plugin:latest
+          args:
+            - "-idx"
+            - "10"
+          resources:
+            requests:
+              cpu: "2m"
+              memory: "5Mi"
+          securityContext:
+            allowPrivilegeEscalation: false
+            capabilities:
+              drop:
+                - ALL
+          volumeMounts:
+            - name: nri-socket
+              mountPath: /var/run/nri/nri.sock
+      volumes:
+        - name: nri-socket
+          hostPath:
+            path: /var/run/nri/nri.sock
+            type: Socket
diff --git a/contrib/kustomize/network-logger/base/kustomization.yaml b/contrib/kustomize/network-logger/base/kustomization.yaml
@@ -0,0 +1,12 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+namespace: kube-system
+resources:
+  - daemonset.yaml
+images:
+  - name: plugin
+    newName: ghcr.io/containerd/nri/plugins/network-logger
+labels:
+  - includeSelectors: true
+    pairs:
+      app.kubernetes.io/name: nri-plugin-network-logger
diff --git a/contrib/kustomize/network-logger/kustomization.yaml b/contrib/kustomize/network-logger/kustomization.yaml
@@ -0,0 +1,6 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - base/
+components:
+  - ../components/image-stable
diff --git a/contrib/kustomize/network-logger/unstable/kustomization.yaml b/contrib/kustomize/network-logger/unstable/kustomization.yaml
@@ -0,0 +1,6 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - ../base/
+components:
+  - ../../components/image-unstable
diff --git a/contrib/kustomize/template/base/daemonset.yaml b/contrib/kustomize/template/base/daemonset.yaml
diff --git a/contrib/kustomize/template/base/kustomization.yaml b/contrib/kustomize/template/base/kustomization.yaml
diff --git a/contrib/kustomize/template/kustomization.yaml b/contrib/kustomize/template/kustomization.yaml
diff --git a/contrib/kustomize/template/unstable/kustomization.yaml b/contrib/kustomize/template/unstable/kustomization.yaml
diff --git a/contrib/kustomize/ulimit-adjuster/base/daemonset.yaml b/contrib/kustomize/ulimit-adjuster/base/daemonset.yaml
diff --git a/contrib/kustomize/ulimit-adjuster/base/kustomization.yaml b/contrib/kustomize/ulimit-adjuster/base/kustomization.yaml
diff --git a/contrib/kustomize/ulimit-adjuster/kustomization.yaml b/contrib/kustomize/ulimit-adjuster/kustomization.yaml
diff --git a/contrib/kustomize/ulimit-adjuster/unstable/kustomization.yaml b/contrib/kustomize/ulimit-adjuster/unstable/kustomization.yaml
diff --git a/contrib/kustomize/v010-adapter/base/daemonset.yaml b/contrib/kustomize/v010-adapter/base/daemonset.yaml
diff --git a/contrib/kustomize/v010-adapter/base/kustomization.yaml b/contrib/kustomize/v010-adapter/base/kustomization.yaml
diff --git a/contrib/kustomize/v010-adapter/kustomization.yaml b/contrib/kustomize/v010-adapter/kustomization.yaml
diff --git a/contrib/kustomize/v010-adapter/unstable/kustomization.yaml b/contrib/kustomize/v010-adapter/unstable/kustomization.yaml
