apiVersion: apps/v1
kind: DaemonSet
metadata:
  labels:
    component: kms
    k8s-app: kms
    kubernetes.io/cluster-service: "true"
  name: kms
  namespace: testNamespace
spec:
  selector:
    matchLabels:
      k8s-app: kms
  template:
    metadata:
      labels:
        k8s-app: kms
    spec:
      containers:
        - name: kms
          image: kmsImage
          args:
            - --port=9000
          volumeMounts:
            - mountPath: /var/config
              name: config
              readOnly: true
          resources: {}
      nodeSelector:
        node-role.kubernetes.io/control-plane: ""
      priorityClassName: system-cluster-critical
      serviceAccountName: kms
      tolerations:
      - key: CriticalAddonsOnly
        operator: Exists
      - effect: NoSchedule
        key: node-role.kubernetes.io/master
        operator: Exists
      - effect: NoSchedule
        key: node-role.kubernetes.io/control-plane
        operator: Exists
      - effect: NoExecute
        operator: Exists
      - effect: NoSchedule
        operator: Exists
      volumes:
      - name: config
        projected:
          sources:
          - configMap:
              items:
              - key: measurements
                path: measurements
              name: join-config
          - secret:
              items:
              - key: mastersecret
                path: mastersecret
              - key: salt
                path: salt
              name: constellation-mastersecret
  updateStrategy: {}
