{{- if .Values.localpv.enabled }}
{{- if .Values.localpv.nodeDeployment.enabled }}
{{- $healthPort := default 8081 .Values.localpv.healthCheck.port }}
apiVersion: apps/v1
kind: DaemonSet
metadata:
  name: {{ template "localpv.fullname" . }}-node
  {{- with .Values.localpv.annotations }}
  annotations: {{ toYaml . | nindent 4 }}
  {{- end }}
  labels:
    {{- include "localpv.labels" . | nindent 4 }}
    {{- if .Values.extraLabels -}}
      {{- toYaml .Values.extraLabels | nindent 4 }}
    {{- end }}
spec:
  selector:
    matchLabels:
      {{- include "localpv.selectorLabels" . | nindent 6 }}
  template:
    metadata:
      {{- with .Values.localpv.podAnnotations }}
      annotations: {{ toYaml . | nindent 8 }}
      {{- end }}
      labels:
        {{- include "localpv.labels" . | nindent 8 }}
        {{- if .Values.extraLabels -}}
          {{- toYaml .Values.extraLabels | nindent 8 }}
        {{- end }}
        {{- with .Values.localpv.podLabels }}
          {{- toYaml . | nindent 8 }}
        {{- end }}
        {{- with .Values.loggingLabels}}
          {{ toYaml . | nindent 8 -}}
        {{- end}}
    spec:
    {{- if .Values.localpv.priorityClassName }}
      priorityClassName: {{ tpl .Values.localpv.priorityClassName . }}
    {{- end }}
      {{- if or .Values.global.imagePullSecrets .Values.imagePullSecrets }}
      imagePullSecrets:
      {{- include "localpv.common.pullSecrets" . | indent 6 }}
      {{- end }}
      serviceAccountName: {{ template "localpv.serviceAccountName" . }}
      securityContext:
        {{- toYaml .Values.podSecurityContext | nindent 8 }}
      containers:
      - name: {{ template "localpv.fullname" . }}
        image: "{{ include "localpv.common.image" (dict "imageRoot" .Values.localpv.image "global" .Values.global "override" .Values.globalImageRegistryOverride) }}"
        imagePullPolicy: {{ default .Values.localpv.image.pullPolicy .Values.global.imagePullPolicy }}
        {{- if .Values.localpv.privileged }}
        securityContext:
          privileged: true
        {{- end }}
        resources:
{{ toYaml .Values.localpv.resources | indent 10 }}
        env:
        # OPENEBS_IO_K8S_MASTER enables openebs provisioner to connect to K8s
        # based on this address. This is ignored if empty.
        # This is supported for openebs provisioner version 0.5.2 onwards
        #- name: OPENEBS_IO_K8S_MASTER
        #  value: "http://10.128.0.12:8080"
        # OPENEBS_IO_KUBE_CONFIG enables openebs provisioner to connect to K8s
        # based on this config. This is ignored if empty.
        # This is supported for openebs provisioner version 0.5.2 onwards
        #- name: OPENEBS_IO_KUBE_CONFIG
        #  value: "/home/ubuntu/.kube/config"
        - name: OPENEBS_NAMESPACE
          valueFrom:
            fieldRef:
              fieldPath: metadata.namespace
        - name: NODE_NAME
          valueFrom:
            fieldRef:
              fieldPath: spec.nodeName
        # POD_NAME is consumed by the analytics leader-election code in
        # node-deployment mode so that each DaemonSet pod has a stable,
        # unique lease identity. Required for correct singleton behavior
        # of install/ping/heartbeat events.
        - name: POD_NAME
          valueFrom:
            fieldRef:
              fieldPath: metadata.name
        # OPENEBS_SERVICE_ACCOUNT provides the service account of this pod as
        # environment variable
        - name: OPENEBS_SERVICE_ACCOUNT
          valueFrom:
            fieldRef:
              fieldPath: spec.serviceAccountName
        # OPENEBS_IO_BASE_PATH is the environment variable that provides the
        # default base path on the node where host-path PVs will be provisioned.
        {{-  if kindIs "bool" .Values.global.analytics.enabled }}
        - name: OPENEBS_IO_ENABLE_ANALYTICS
          value: "{{ .Values.global.analytics.enabled }}"
        {{- else }}
        - name: OPENEBS_IO_ENABLE_ANALYTICS
          value: "{{ .Values.analytics.enabled }}"
        {{- end }}
          # OPENEBS_IO_ANALYTICS_STATE_CM names the ConfigMap consulted to
          # decide whether to emit the install event for this Helm release
          # and to persist ping/heartbeat timestamps across pod restarts.
          # The provisioner creates and updates this ConfigMap itself; it
          # is not managed by Helm.
        - name: OPENEBS_IO_ANALYTICS_STATE_CM
          value: {{ include "localpv.analyticsStateCM.name" . | quote }}
          # OPENEBS_IO_ANALYTICS_LEASE names the Lease used to elect a single
          # analytics emitter across all DaemonSet pods. Release-scoped so
          # multiple releases in the same namespace do not collide. The
          # provisioner creates the Lease on-demand via client-go's
          # leader-election; it is not managed by Helm.
        - name: OPENEBS_IO_ANALYTICS_LEASE
          value: {{ include "localpv.analyticsLease.name" . | quote }}
        {{- if .Values.global.analytics.gaId }}
        - name: GA_ID
          value: {{ .Values.global.analytics.gaId | quote }}
        {{- else if .Values.analytics.gaId }}
        - name: GA_ID
          value: {{ .Values.analytics.gaId | quote }}
        {{- end }}
        {{- if .Values.global.analytics.gaKey }}
        - name: GA_KEY
          value: {{ .Values.global.analytics.gaKey | quote }}
        {{- else if .Values.analytics.gaKey }}
        - name: GA_KEY
          value: {{ .Values.analytics.gaKey | quote }}
        {{- end }}
        - name: OPENEBS_IO_BASE_PATH
          value: "{{ .Values.localpv.basePath }}"
        - name: OPENEBS_IO_WORKER_THREADS
          value: {{ .Values.localpv.controller.workers | quote }}
        {{- if .Values.localpv.controller.client.qps }}
        - name: OPENEBS_IO_CLIENT_QPS
          value: {{ .Values.localpv.controller.client.qps | quote }}
        {{- end }}
        {{- if .Values.localpv.controller.client.burst }}
        - name: OPENEBS_IO_CLIENT_BURST
          value: {{ .Values.localpv.controller.client.burst | quote }}
        {{- end }}
        - name: OPENEBS_IO_HELPER_IMAGE
          value: "{{ include "localpv.common.image" (dict "imageRoot" .Values.helperPod.image "global" .Values.global "override" .Values.globalImageRegistryOverride) }}"
        - name: OPENEBS_IO_IMAGE_PULL_POLICY
          value: "{{ default .Values.helperPod.image.pullPolicy .Values.global.imagePullPolicy }}"
        - name: OPENEBS_IO_HELPER_POD_HOST_NETWORK
          value: "{{ .Values.helperPod.hostNetwork }}"
        - name: OPENEBS_IO_INSTALLER_TYPE
          value: "localpv-charts-helm-nodedeploy"
        - name: OPENEBS_IO_HELPER_POD_TIMEOUT_SECS
          value: {{ .Values.helperPod.timeoutSecs | quote }}
        # Disable leader election in node deployment mode.
        # Not related to anonymous usage analytics leader election.
        - name: LEADER_ELECTION_ENABLED
          value: "false"
        # Enable node deployment mode
        - name: NODE_DEPLOYMENT
          value: "true"
        # OPENEBS_IO_HEALTH_PROBE_BIND_ADDRESS is the address the health-probe
        # HTTP server binds to. /healthz serves liveness, /readyz serves readiness.
        - name: OPENEBS_IO_HEALTH_PROBE_BIND_ADDRESS
          value: ":{{ $healthPort }}"
{{- include "localpv.helper.pullSecrets" . | indent 8 }}
        args:
        - "--node-deployment=true"
        {{- if .Values.localpv.allowInsecurePvcBasePathOverride }}
        - "--allow-insecure-pvc-basepath-override"
        {{- end }}
        ports:
        - name: healthz
          containerPort: {{ $healthPort }}
          protocol: TCP
        {{- if .Values.localpv.healthCheck.liveness.enabled }}
        livenessProbe:
          httpGet:
            path: /healthz
            port: healthz
          initialDelaySeconds: {{ .Values.localpv.healthCheck.liveness.initialDelaySeconds }}
          periodSeconds: {{ .Values.localpv.healthCheck.liveness.periodSeconds }}
          timeoutSeconds: {{ .Values.localpv.healthCheck.liveness.timeoutSeconds }}
          failureThreshold: {{ .Values.localpv.healthCheck.liveness.failureThreshold }}
        {{- end }}
        {{- if .Values.localpv.healthCheck.readiness.enabled }}
        readinessProbe:
          httpGet:
            path: /readyz
            port: healthz
          initialDelaySeconds: {{ .Values.localpv.healthCheck.readiness.initialDelaySeconds }}
          periodSeconds: {{ .Values.localpv.healthCheck.readiness.periodSeconds }}
          timeoutSeconds: {{ .Values.localpv.healthCheck.readiness.timeoutSeconds }}
          failureThreshold: {{ .Values.localpv.healthCheck.readiness.failureThreshold }}
        {{- end }}
        volumeMounts:
        - name: host-root
          mountPath: /host
          mountPropagation: HostToContainer
{{- if .Values.localpv.nodeDeployment.additionalVolumeMounts }}
{{ toYaml .Values.localpv.nodeDeployment.additionalVolumeMounts | indent 8 }}
{{- end }}
      volumes:
      - name: host-root
        hostPath:
          path: /
          type: Directory
{{- if .Values.localpv.nodeDeployment.additionalVolumes }}
{{ toYaml .Values.localpv.nodeDeployment.additionalVolumes | indent 6 }}
{{- end }}
{{- if .Values.localpv.nodeSelector }}
      nodeSelector:
{{ toYaml .Values.localpv.nodeSelector | indent 8 }}
{{- end }}
{{- if $tolerations := include "tolerations_with_early_eviction" . }}
      tolerations: {{ $tolerations }}
{{- end }}
{{- if .Values.localpv.affinity }}
      affinity:
{{ toYaml .Values.localpv.affinity | indent 8 }}
{{- end }}
{{- end }}
{{- end }}