gas-deployment.yaml

apiVersion: apps/v1
kind: Deployment
metadata:
  name: gpu-aware-scheduling
  namespace: default 
  labels:
    app: gas
spec:
  replicas: 1
  selector:
    matchLabels:
      app: gas
  template:
    metadata:
      labels:
        app: gas
    spec:
      serviceAccountName: gpu-aware-scheduling-service-account
      containers:
      - name: gasext
        command:
        - "/extender"
        - "--cert=/gas/cert/tls.crt"
        - "--key=/gas/cert/tls.key"
        - "--cacert=/var/run/secrets/kubernetes.io/serviceaccount/ca.crt"
        - "--burst=100"
        - "--qps=50"
        - "--v=4"
        image: intel/gpu-extender
        imagePullPolicy: IfNotPresent
        securityContext:
          capabilities:
            drop:
              - all
          readOnlyRootFilesystem: true
          runAsNonRoot: true
          runAsUser: 10001
          runAsGroup: 10001
          allowPrivilegeEscalation: false
          seccompProfile:
            type: RuntimeDefault
        volumeMounts:
        - name: certs
          mountPath: /gas/cert
      volumes:
      - name: certs
        secret:
          secretName: extender-secret
      tolerations:
      - key: node-role.kubernetes.io/master
        operator: Exists
      - key: node-role.kubernetes.io/control-plane
        operator: Exists
      affinity:
        nodeAffinity:
          requiredDuringSchedulingIgnoredDuringExecution:
            nodeSelectorTerms:
            - matchExpressions:
              - key: node-role.kubernetes.io/control-plane
                operator: Exists