apiVersion: v1
kind: Pod
metadata:
  name: enb-cu-cunt-4
spec:
  serviceAccountName: oai-sa
  containers:
  - name: cunt-cunt-tun
    image: image-registry.openshift-image-registry.svc:5000/infidel-test/oai-enb-cu
    securityContext:
      privileged: true
      capabilities:
        add: ["NET_ADMIN"]
    volumeMounts:
        - mountPath: /dev/net/tun
          readOnly: true 
          name: dev-tun
  volumes:
    - name: dev-tun
      hostPath:
        path: /dev/net/tun