ssh-pod.yaml

apiVersion: v1
kind: Pod
metadata:
  name: ssh-pod
  namespace: default
  labels:
    ssh-pod: "true"
spec:
  hostPID: true
  nodeName: $SSH_HOST
  tolerations:
  - key: node.kubernetes.io/disk-pressure
    operator: Exists
  - key: node.kubernetes.io/memory-pressure
    operator: Exists
  - key: node.kubernetes.io/network-unavailable
    operator: Exists
  - key: node.kubernetes.io/not-ready
    operator: Exists
  - key: node.kubernetes.io/pid-pressure
    operator: Exists
  - key: node.kubernetes.io/unreachable
    operator: Exists
  - key: node.kubernetes.io/unschedulable
    operator: Exists
  - key: node.cloudprovider.kubernetes.io/shutdown
    operator: Exists
  containers:
  - name: mount
    image: nixery.dev/shell/curl/unixtools.ping/nmap/kmod/findutils/gawk/gnugrep/gnused/coreutils-full/cri-tools/docker-client/kubectl/nerdctl
    command:
    - bash
    - -c
    - sleep infinity
    volumeMounts:
    - mountPath: /run/containerd/containerd.sock
      name: containerd-socket
      readOnly: true
    - mountPath: /var/run/docker.sock
      name: docker-socket
      readOnly: true
    - mountPath: /host
      name: host
    securityContext:
      privileged: true
  restartPolicy: Never
  volumes:
  - hostPath:
      path: /run/containerd/containerd.sock
    name: containerd-socket
  - hostPath:
      path: /var/run/docker.sock
    name: docker-socket
  - hostPath:
      path: /
    name: host