k8sdeploy.yaml

apiVersion: apps/v1
kind: Deployment
metadata:
  name: azure-cvm-attest
spec:
  nodeSelector:
    kubernetes.azure.com/security-type: ConfidentialVM 
  replicas: 1
  selector:
    matchLabels:
      app: azure-cvm-attest
  template:
    metadata:
      labels:
        app: azure-cvm-attest
    spec:
      nodeSelector:
        kubernetes.azure.com/security-type: ConfidentialVM
      containers:
      - name: azure-cvm-attest
        image: mcr.microsoft.com/acc/samples/cvm-python-attestation:1.0
        imagePullPolicy: IfNotPresent
        volumeMounts:
          - mountPath: /sys/kernel/security
            name: tcg
          - mountPath: /dev/tpmrm0
            name: tpmrm0
        securityContext:
          privileged: true
        resources:
          requests:
            cpu: 100m
            memory: 128Mi
          limits:
            cpu: 250m
            memory: 256Mi
        ports:
        - containerPort: 8081
      volumes:
          - name: tcg
            hostPath:
              path: /sys/kernel/security
          - name: tpmrm0
            hostPath:
              path: /dev/tpmrm0
  restartPolicy: Never
---
apiVersion: v1
kind: Service
metadata:
  name: azure-cvm-attest
spec:
  type: LoadBalancer
  ports:
  - port: 8081
  selector:
    app: azure-cvm-attest