apiVersion: apps/v1
kind: DaemonSet
metadata:
  name: fip-alias-agent
  namespace: {{ taskserv.alias_agent_namespace }}
  labels:
    app.kubernetes.io/name: fip-alias-agent
    app.kubernetes.io/managed-by: provisioning
spec:
  selector:
    matchLabels:
      app.kubernetes.io/name: fip-alias-agent
  template:
    metadata:
      labels:
        app.kubernetes.io/name: fip-alias-agent
        app.kubernetes.io/managed-by: provisioning
    spec:
      # hostNetwork: shared host network namespace — ip addr commands affect the host eth0 directly.
      hostNetwork: true
      # No nodeSelector: the alias-agent image is multi-arch (digest-pinned) and
      # must run on every node — incl. amd64 wrk-2 — so a FIP can be aliased
      # wherever it homes. node_selector fences the controller only (see deployment).
      tolerations:
        - operator: Exists
      containers:
        - name: agent
          image: {{ taskserv.alias_agent_image }}:{{ taskserv.alias_agent_image_tag }}
          securityContext:
            privileged: true
          resources:
            requests:
              cpu: "5m"
              memory: "8Mi"
            limits:
              cpu: "50m"
              memory: "32Mi"