apiVersion: apps.openshift.io/v1
kind: DeploymentConfig
metadata:
  name: oai-inf-cu-sa
  labels:
    app: oai-inf-cu-sa
spec:
  replicas: 3
  selector:
    app: oai-inf-cu-sa
  strategy:
    type: Rolling
    rollingParams:
      intervalSeconds: 1
      updatePeriodSeconds: 1
      maxUnavailable: 0
      maxSurge: 1
      minReadySeconds: 30
  template: 
    metadata:
      labels:
        app: oai-inf-cu-sa
      annotations:
        k8s.v1.cni.cncf.io/networks: oai-cu-net
    spec:
      securityContextConstraints:
        - name: privileged
        - name: oai-scc
      serviceAccountName: oai-sa
      containers:
      - name: inf-cu
        image: image-registry.openshift-image-registry.svc:5000/infidel-test/oai-image-du
        securityContext:
          privileged: true
        capabilities:
            add: ["SYS_ADMIN"]
        volumeMounts:
            - mountPath: /dev/net/tun
              readOnly: true 
              name: dev-tun
      volumes:
        - name: dev-tun
          hostPath:
            path: /dev/net/tun
  triggers:
  - type: ConfigChange
  - type: ImageChange
    imageChangeParams:
      automatic: true
      containerNames:
      - oai-inf-cu-sa
      from:
        kind: ImageStreamTag
        name: oai-image-du:latest
        namespace: infidel-test