apiVersion: apps/v1
kind: DaemonSet
metadata:
  name: zabbix-agent
  namespace: monitoring
spec:
  selector:
    matchLabels:
      app: zabbix-agent
  template:
    metadata:
      labels:
        app: zabbix-agent
    spec:
      hostNetwork: true
      hostPID: true
      hostIPC: false
      containers:
      - name: zabbix-agent
        image: zabbix/zabbix-agent:alpine-5.0-latest
        imagePullPolicy: Always
        ports:
        - containerPort: 10050
          name: zabbix-agent
        env:
        - name: ZBX_SERVER_HOST
          value: k8x_zabbix_server
        - name: ZBX_STARTAGENTS
          value: "1"
        - name: ZBX_TIMEOUT
          value: "10"
        - name: ZBX_TLSCONNECT
          value: "psk"
        - name: ZBX_TLSACCEPT
          value: "psk"
        - name: ZBX_TLSPSKIDENTITY
          valueFrom:
            secretKeyRef:
              name: zabbix-psk-id-secret
              key: zabbix_psk_id
        - name: ZBX_TLSPSKFILE
          value: "zabbix_agentd.psk"
        - name: ZBX_ACTIVE_ALLOW
          value: "false"
        securityContext:
          privileged: true
        resources:
          requests:
            cpu: 0.15
        volumeMounts:
        - name: zabbix-psk-config
          mountPath: "/var/lib/zabbix/enc"
          readOnly: true
      volumes:
      - name: zabbix-psk-config
        secret:
          secretName: zabbix-psk-secret