apiVersion: apps/v1
kind: Deployment
metadata:
  name: samba
  namespace: kube-system
  labels:
    app: samba
spec:
  replicas: 1
  selector:
    matchLabels:
      app: samba
  strategy:
    type: Recreate
  template:
    metadata:
      labels:
        app: samba
    spec:
      containers:
        - name: samba
          image: quay.io/samba.org/samba-server:latest
          securityContext:
            privileged: true
            capabilities:
              add: ["NET_ADMIN"]
          hostNetwork: true
          dnsPolicy: ClusterFirstWithHostNet
          ports:
            - containerPort: 445
              hostPort: 445
          resources:
            limits:
              cpu: 1000m
              memory: 2Gi
            requests:
              cpu: 10m
              memory: 64Mi
          volumeMounts:
            - mountPath: /share
              name: local-path
      volumes:
        - name: local-path
          hostPath:
            path: /usr/local/data
            type: Directory