github.com/inspektor-gadget/inspektor-gadget@v0.28.1/docs/examples/pod-ig.yaml (about)

     1  # This manifest is a template for running the ig binary inside a pod. For simplicity, we use a
     2  # privileged pod, but you can use a more restrictive setup. Check
     3  # charts/gadget/templates/daemonset.yaml that is our source of true for the security configuration
     4  # needed by Inspektor Gadget.
     5  apiVersion: v1
     6  kind: Pod
     7  metadata:
     8    name: ig
     9    labels:
    10      k8s-app: example-ig
    11  spec:
    12    containers:
    13      - name: ig
    14        image: ghcr.io/inspektor-gadget/ig:latest
    15        securityContext:
    16          # CHANGEME: see comment at the top of this file
    17          privileged: true
    18        command:
    19          # CHANGEME: run the gadget of your choice
    20          - "ig"
    21          - "trace"
    22          - "exec"
    23          - "--host"
    24        env:
    25          - name: HOST_ROOT
    26            value: "/host"
    27        volumeMounts:
    28          - mountPath: /host
    29            name: host
    30          - mountPath: /run
    31            name: run
    32    # CHANGEME: where do you want to run this pod?
    33    nodeName: minikube-containerd
    34    volumes:
    35      - name: host
    36        hostPath:
    37          path: /
    38      - name: run
    39        hostPath:
    40          path: /run