apiVersion: apps/v1
kind: Deployment
metadata:
  name: f5gc-nssf
  labels:
    app: f5gc-nssf
  annotations:
    free5gc.org/nssi-id: '27394d25-dbf5-428e-8fc3-f5b2add67115'
    free5gc.org/nsi-ids: '[
        { "id": "4e6db941-47d6-4fce-9c71-f7eb35a75d03" },
    ]'
    free5gc.org/supported-snssais: '[
        { "st": 1,
          "ssd": "010203",
        },
        { "st": 1,
          "ssd": "112233",
        },
    ]'
spec:
  replicas: 1
  selector:
    matchLabels:
      app: f5gc-nssf
  strategy:
    type: Recreate
  template:
    metadata:
      labels:
        app: f5gc-nssf
    spec:
      securityContext:
        runAsUser: 0
        runAsGroup: 0
      nodeSelector:
{{ .Values.nodeSelector | toYaml | indent 8 }}
      initContainers:
      - name: init-myservice
        image: busybox:1.31.1
        command: ['sh', '-c', "until wget -qO- $nrfUri &> /dev/null; do echo waiting for $nrfUri; sleep 2; done"]
        env:
        - name: nrfUri
          value: {{ .Values.configuration.nrfUri }}
      containers:
        - name: free5g-304-nssf 
          image: {{ .Values.image.repository }}:{{ .Values.image.tag }}
          imagePullPolicy: {{ .Values.image.pullPolicy }}
          command: ["./nssf"]
          args:
            - -nssfcfg
            - ../config/nssfcfg.conf
          securityContext:
            privileged: false
          volumeMounts:
            - name: f5gc-nssf-config
              mountPath: /free5gc/config
            - name: f5gc-nssf-cert
              mountPath: /free5gc/support/TLS
          ports:
            - containerPort: {{ .Values.service.port }}
              name: f5gc-nssf
              protocol: TCP
        - name: tcpdump
          image: corfr/tcpdump
          imagePullPolicy: IfNotPresent
          command:
            - /bin/sleep
            - infinity
      dnsPolicy: ClusterFirst
      restartPolicy: Always
      schedulerName: default-scheduler
      serviceAccountName: f5gc-nssf-sa
      terminationGracePeriodSeconds: 30
      volumes:
        - name: f5gc-nssf-cert
          secret:
            secretName: f5gc-nssf-tls-secret
        - name: f5gc-nssf-config
          configMap:
            name: f5gc-nssf-config