打造超级富容器开发环境（四）：部署富容器

apiVersion: apps/v1
kind: DaemonSet
metadata:
  labels:
    app: devcontainer
  name: devcontainer
  namespace: devcontainer
spec:
  selector:
    matchLabels:
      app: devcontainer
  template:
    metadata:
      labels:
        app: devcontainer
    spec:
      containers:
        - image: your.registry.com/private/devcontainer:latest
          imagePullPolicy: IfNotPresent
          name: devcontainer
          tty: true
          stdin: true
          securityContext:
            privileged: true
            runAsUser: 0
            runAsGroup: 0
          volumeMounts:
            - mountPath: /host
              name: host
              mountPropagation: Bidirectional
            - mountPath: /sys/fs/cgroup
              name: cgroup
              readOnly: true
            - mountPath: /root
              name: root
            - mountPath: /data # host 与容器内保持一致的路径，可用于在容器内运行某些项目的容器构建脚本，路径一致方便host上的dockerd对项目路径mount进容器
              name: data
              mountPropagation: Bidirectional
      dnsPolicy: Default
      hostNetwork: true
      hostPID: false
      restartPolicy: Always
      terminationGracePeriodSeconds: 1
      volumes:
        - name: root
          hostPath:
            path: /data/root
            type: DirectoryOrCreate
        - name: cgroup
          hostPath:
            path: /sys/fs/cgroup
            type: Directory
        - name: host
          hostPath:
            path: /
            type: Directory
        - name: data
          hostPath:
            path: /data
            type: DirectoryOrCreate
  updateStrategy:
    rollingUpdate:
      maxSurge: 0
      maxUnavailable: 1
    type: RollingUpdate