apiVersion: v1
kind: Pod
metadata:
  name: nerdctl-helper
  namespace: default
spec:
  nodeSelector:
    kubernetes.io/hostname: v1002

  hostPID: true
  hostNetwork: true
  containers:
  - name: nerdctl
    image: alpine:3.20
    securityContext:
      privileged: true
    command:
      - /bin/sh
      - -c
      - |
        apk add --no-cache bash curl nerdctl
        echo "nerdctl ready. Use 'kubectl exec -it nerdctl-helper -- bash'"
        sleep infinity
    volumeMounts:
      - name: containerd-sock
        mountPath: /run/containerd/containerd.sock
  restartPolicy: Never
  volumes:
    - name: containerd-sock
      hostPath:
        path: /run/containerd/containerd.sock
        type: Socket