apiVersion: apps/v1
kind: DaemonSet
metadata:
  name: redsocks
spec:
  selector:
    matchLabels:
      app.kubernetes.io/name: redsocks
      app.kubernetes.io/part-of: redsocks
  template:
    metadata:
      labels:
        app.kubernetes.io/name: redsocks
        app.kubernetes.io/part-of: redsocks
    spec:
      tolerations:
      - key: "edge.cluster.local/not-schedulable"
        operator: "Equal"
        effect: "NoSchedule"
      - key: "workstation.cluster.local"
        operator: "Equal"
        value: "true"
        effect: "NoSchedule"
      hostNetwork: true
      containers:
      - image: nixery.dev/shell/coreutils/util-linux/redsocks
        name: redsocks
        command:
        - /bin/redsocks
        args:
        - -c
        - /etc/redsocks.conf
        ports:
        - containerPort: 1083
          name: socks5
          protocol: TCP
        volumeMounts:
        - mountPath: /etc/redsocks.conf
          subPath: redsocks.conf
          readOnly: true
          name: config
      volumes:
      - name: config
        configMap:
          name: redsocks-configuration
