hostNetwork: true
containers:
- name: companion
  image: ghcr.io/bitfocus/companion/companion:v{{ companion_version }}
  imagePullPolicy: Always
  securityContext:
    privileged: true
    supplementalGroups:
    - 46 # plugdev
  volumeMounts:
  - name: dev-usb
    mountPath: /dev/bus/usb
  - name: data
    mountPath: /companion
  - name: secrets
    mountPath: /secrets
    readOnly: yes
volumes:
- name: dev-usb
  hostPath:
    path: /dev/bus/usb
- name: data
  hostPath:
    type: Directory
    path: "{{ companion_basepath }}/data"
- name: secrets
  hostPath:
    type: Directory
    path: "{{ companion_basepath }}/secrets"