apiVersion: v1
kind: Namespace
metadata:
  name: fim
  labels:
    workload.edge.ncr.com: platform
  annotations:
    configmanagement.gke.io/cluster-selector: dsds-cluster
    pallet.edge.ncr.com/created: "2023-02-16T21:26:39Z"
    pallet.edge.ncr.com/name: fim
    pallet.edge.ncr.com/revision: 696897a3df910b6e84a88c9336907a17b18159c1
    pallet.edge.ncr.com/source: https://github.com/ncrvoyix-swt-retail/edge-infra/tree/696897a3df910b6e84a88c9336907a17b18159c1
    pallet.edge.ncr.com/team: '@ncrvoyix-swt-retail/sds'
    pallet.edge.ncr.com/version: 7.7.7-rc.1676582799+commit.696897a
---
apiVersion: apps/v1
kind: DaemonSet
metadata:
  name: samhain
  namespace: fim
  labels:
    app: samhain
    platform.edge.ncr.com/component: fim
  annotations:
    configmanagement.gke.io/cluster-selector: dsds-cluster
    pallet.edge.ncr.com/created: "2023-02-16T21:26:39Z"
    pallet.edge.ncr.com/name: fim
    pallet.edge.ncr.com/revision: 696897a3df910b6e84a88c9336907a17b18159c1
    pallet.edge.ncr.com/source: https://github.com/ncrvoyix-swt-retail/edge-infra/tree/696897a3df910b6e84a88c9336907a17b18159c1
    pallet.edge.ncr.com/team: '@ncrvoyix-swt-retail/sds'
    pallet.edge.ncr.com/version: 7.7.7-rc.1676582799+commit.696897a
spec:
  template:
    spec:
      initContainers:
      - name: init-fim
        image: us-east1-docker.pkg.dev/ret-edge-pltf-infra/workloads/alpine-fim@sha256:97fc44b0293e908a21f031926abd44e19c2a5b2bf90c97c592740625f41be757
        command: ["/bin/busybox.static", "sh", "/var/samhain/config/init-script.sh"]
        resources:
          limits:
            cpu: "100m"
            memory: "120Mi"
        volumeMounts:
        - name: host-usr
          readOnly: true
          mountPath: /usr
        - name: host-etc
          readOnly: true
          mountPath: /etc
        - name: host-fs
          readOnly: true
          mountPath: /host-files
        - name: db
          mountPath: /samhain/db/
        - name: vmlinuz
          readOnly: true
          mountPath: /build/image/vmlinuz
        - name: initrd
          readOnly: true
          mountPath: /build/image/initrd
        - name: ien-version
          readOnly: true
          mountPath: /ien-version
        imagePullPolicy: IfNotPresent
      containers:
      - name: alpine-fim
        image: us-east1-docker.pkg.dev/ret-edge-pltf-infra/workloads/alpine-fim@sha256:97fc44b0293e908a21f031926abd44e19c2a5b2bf90c97c592740625f41be757
        command: ["/bin/busybox.static", "sh", "/var/samhain/config/container-script.sh"]
        resources:
          limits:
            cpu: "100m"
            memory: "120Mi"
        volumeMounts:
        - name: host-usr
          readOnly: true
          mountPath: /usr
        - name: host-etc
          readOnly: true
          mountPath: /etc
        - name: db
          readOnly: true
          mountPath: /var/samhain/db/
        - name: vmlinuz
          readOnly: true
          mountPath: /build/image/vmlinuz
        - name: initrd
          readOnly: true
          mountPath: /build/image/initrd
        - name: ien-version
          readOnly: true
          mountPath: /ien-version
        imagePullPolicy: IfNotPresent
      volumes:
      - name: db
        hostPath:
          type: DirectoryOrCreate
          path: /var/samhain/db/
      - name: host-etc
        hostPath:
          type: Directory
          path: /etc
      - name: host-fs
        hostPath:
          type: Directory
          path: /
      - name: host-usr
        hostPath:
          type: Directory
          path: /usr
      - name: ien-version
        hostPath:
          type: File
          path: /ien-version
      - name: initrd
        hostPath:
          type: File
          path: /boot/live/initrd
      - name: vmlinuz
        hostPath:
          type: File
          path: /boot/live/vmlinuz
      imagePullSecrets:
      - name: edge-docker-pull-secret
    metadata:
      labels:
        platform.edge.ncr.com/component: fim
      annotations:
        configmanagement.gke.io/cluster-selector: dsds-cluster
        pallet.edge.ncr.com/created: "2023-02-16T21:26:39Z"
        pallet.edge.ncr.com/name: fim
        pallet.edge.ncr.com/revision: 696897a3df910b6e84a88c9336907a17b18159c1
        pallet.edge.ncr.com/source: https://github.com/ncrvoyix-swt-retail/edge-infra/tree/696897a3df910b6e84a88c9336907a17b18159c1
        pallet.edge.ncr.com/team: '@ncrvoyix-swt-retail/sds'
        pallet.edge.ncr.com/version: 7.7.7-rc.1676582799+commit.696897a
  selector:
    matchLabels:
      platform.edge.ncr.com/component: fim