---
apiVersion: v1
kind: Pod
metadata:
  name: nse-vl3-vpp-1
  annotations:
    spiffe.io/federatesWith: nsm.cluster2,nsm.cluster3
  labels:
    app: nse-vl3-vpp
    "spiffe.io/spiffe-id": "true"
spec:
  containers:
    - name: nse
      image: ghcr.io/networkservicemesh/cmd-nse-vl3-vpp:9374c75
      imagePullPolicy: IfNotPresent
      env:
        - name: SPIFFE_ENDPOINT_SOCKET
          value: unix:///run/spire/sockets/agent.sock
        - name: NSM_NAME
          value: "nse-vl3-vpp-1@my.cluster3"
        - name: NSM_REGISTER_SERVICE
          value: "false"
        - name: NSM_SERVICE_NAMES
          value: "my-interdomain-vl3-network@my.cluster3"
        - name: NSM_PREFIXSERVERURL
          value: "tcp://172.18.3.131:5006"
        - name: NSM_LOG_LEVEL
          value: TRACE
      volumeMounts:
        - name: spire-agent-socket
          mountPath: /run/spire/sockets
          readOnly: true
        - name: nsm-socket
          mountPath: /var/lib/networkservicemesh
          readOnly: true
      resources:
        requests:
          cpu: 150m
        limits:
          memory: 400Mi
          cpu: 500m
  volumes:
    - name: spire-agent-socket
      hostPath:
        path: /run/spire/sockets
        type: Directory
    - name: nsm-socket
      hostPath:
        path: /var/lib/networkservicemesh
        type: DirectoryOrCreate
