apiVersion: apps/v1
kind: DaemonSet
metadata:
 name: fuse-device-plugin
 namespace: kube-system
spec:
 selector:
   matchLabels:
     name: fuse-device-plugin
 template:
   metadata:
     labels:
       name: fuse-device-plugin
   spec:
     containers:
     - image: git.pyrocufflink.net/containerimages/fuse-device-plugin
       name: fuse-device-plugin
       securityContext:
         allowPrivilegeEscalation: false
         capabilities:
           drop:
           - ALL
       volumeMounts:
       - name: device-plugin
         mountPath: /var/lib/kubelet/device-plugins
     hostNetwork: true
     volumes:
     - name: device-plugin
       hostPath:
         path: /var/lib/kubelet/device-plugins