mirror of
https://github.com/auricom/home-cluster.git
synced 2025-10-01 16:05:55 +02:00
108 lines
2.3 KiB
YAML
108 lines
2.3 KiB
YAML
---
|
|
apiVersion: v1
|
|
kind: Namespace
|
|
metadata:
|
|
name: my-privileged-namespace
|
|
labels:
|
|
pod-security.kubernetes.io/enforce: privileged
|
|
pod-security.kubernetes.io/enforce-version: latest
|
|
---
|
|
apiVersion: v1
|
|
kind: Pod
|
|
metadata:
|
|
name: disk-wipe-talos-node-2
|
|
namespace: my-privileged-namespace
|
|
spec:
|
|
restartPolicy: Never
|
|
nodeName: talos-node-2
|
|
containers:
|
|
- name: disk-wipe
|
|
image: rook/ceph:v1.10.8
|
|
securityContext:
|
|
privileged: true
|
|
command:
|
|
[
|
|
"/bin/sh",
|
|
"-c",
|
|
"sgdisk --zap-all /dev/nvme0n1",
|
|
"dd if=/dev/zero bs=1M count=10000 oflag=direct of=/dev/nvme0n1",
|
|
"blkdiscard /dev/nvme0n1",
|
|
"partprobe /dev/nvme0n1",
|
|
]
|
|
volumeMounts:
|
|
- mountPath: /dev
|
|
name: dev
|
|
securityContext:
|
|
runAsUser: 0
|
|
runAsGroup: 0
|
|
volumes:
|
|
- name: dev
|
|
hostPath:
|
|
path: /dev
|
|
---
|
|
apiVersion: v1
|
|
kind: Pod
|
|
metadata:
|
|
name: disk-wipe-talos-node-3
|
|
namespace: my-privileged-namespace
|
|
spec:
|
|
restartPolicy: Never
|
|
nodeName: talos-node-3
|
|
containers:
|
|
- name: disk-wipe
|
|
image: rook/ceph:v1.10.8
|
|
securityContext:
|
|
privileged: true
|
|
command:
|
|
[
|
|
"/bin/sh",
|
|
"-c",
|
|
"sgdisk --zap-all /dev/nvme0n1",
|
|
"dd if=/dev/zero bs=1M count=10000 oflag=direct of=/dev/nvme0n1",
|
|
"blkdiscard /dev/nvme0n1",
|
|
"partprobe /dev/nvme0n1",
|
|
]
|
|
volumeMounts:
|
|
- mountPath: /dev
|
|
name: dev
|
|
securityContext:
|
|
runAsUser: 0
|
|
runAsGroup: 0
|
|
volumes:
|
|
- name: dev
|
|
hostPath:
|
|
path: /dev
|
|
---
|
|
apiVersion: v1
|
|
kind: Pod
|
|
metadata:
|
|
name: disk-wipe-talos-node-4
|
|
namespace: my-privileged-namespace
|
|
spec:
|
|
restartPolicy: Never
|
|
nodeName: talos-node-4
|
|
containers:
|
|
- name: disk-wipe
|
|
image: rook/ceph:v1.10.8
|
|
securityContext:
|
|
privileged: true
|
|
command:
|
|
[
|
|
"/bin/sh",
|
|
"-c",
|
|
"sgdisk --zap-all /dev/nvme0n1",
|
|
"dd if=/dev/zero bs=1M count=10000 oflag=direct of=/dev/nvme0n1",
|
|
"blkdiscard /dev/nvme0n1",
|
|
"partprobe /dev/nvme0n1",
|
|
]
|
|
volumeMounts:
|
|
- mountPath: /dev
|
|
name: dev
|
|
securityContext:
|
|
runAsUser: 0
|
|
runAsGroup: 0
|
|
volumes:
|
|
- name: dev
|
|
hostPath:
|
|
path: /dev
|