<p>My pod needs to access <code>/dev/kvm</code> but it cannot run as privileged for security reasons.</p>

<p>How do I do this in Kubernetes?</p>

<p>There is a <a href="https://kubernetes.io/docs/concepts/extend-kubernetes/compute-storage-net/device-plugins/" rel="nofollow noreferrer">device-plugin</a> called <a href="https://github.com/kubevirt/kubernetes-device-plugins/blob/master/docs/README.kvm.md" rel="nofollow noreferrer">KVM Device Plugin</a> that serves exactly for this purpose.</p>

<blockquote>
  <p>This software is a kubernetes device plugin that exposes /dev/kvm from
  the system.</p>
</blockquote>
