blue-nse.yaml

---
apiVersion: v1
kind: Pod
metadata:
  name: blue-nse
  labels:
    app: blue-nse
    "spiffe.io/spiffe-id": "true"
spec:
  containers:
    - name: nse
      image: ghcr.io/networkservicemesh/ci/cmd-nse-icmp-responder:5c0dd03
      imagePullPolicy: IfNotPresent
      env:
        - name: SPIFFE_ENDPOINT_SOCKET
          value: unix:///run/spire/sockets/agent.sock
        - name: POD_NAME
          valueFrom:
            fieldRef:
              fieldPath: metadata.name
        - name: NSM_NAME
          value: "$(POD_NAME)"
        - name: NSM_LOG_LEVEL
          value: INFO
        - name: NSM_CONNECT_TO
          value: unix:///var/lib/networkservicemesh/nsm.io.sock
        - name: NSM_CIDR_PREFIX
          value: 172.16.2.100/31
        - name: NSM_SERVICE_NAMES
          value: "my-network-service"
        - name: NSM_REGISTER_SERVICE
          value: "false"
        - name: NSM_LABELS
          value: "color:Blue"
      volumeMounts:
        - name: spire-agent-socket
          mountPath: /run/spire/sockets
          readOnly: true
        - name: nsm-socket
          mountPath: /var/lib/networkservicemesh
          readOnly: true
      resources:
        requests:
          cpu: 100m
          memory: 40Mi
        limits:
          memory: 80Mi
          cpu: 200m
  volumes:
    - name: spire-agent-socket
      hostPath:
        path: /run/spire/sockets
        type: Directory
    - name: nsm-socket
      hostPath:
        path: /var/lib/networkservicemesh
        type: DirectoryOrCreate