apiVersion: apps/v1
kind: Deployment
metadata:
  name: samba
  labels:
    app: samba
spec:
  replicas: 1
  selector:
    matchLabels:
      app: samba
  strategy:
    type: Recreate
  template:
    metadata:
      labels:
        app: samba
    spec:
      containers:
        - name: samba
          image: quay.io/samba.org/samba-server:latest
          ports:
            - containerPort: 445
              hostPort: 445
          env:
            - name: SAMBACC_CONFIG
              value: /etc/samba-container/config.json
            - name: SAMBA_CONTAINER_ID
              value: local
          resources:
            limits:
              cpu: 1000m
              memory: 2Gi
            requests:
              cpu: 10m
              memory: 64Mi
          volumeMounts:
            - mountPath: /share
              name: local-path
            - mountPath: /etc/samba-container
              name: samba-config
      securityContext:
        privileged: true
        capabilities:
          add: ["NET_ADMIN"]
      hostNetwork: true
      dnsPolicy: ClusterFirstWithHostNet
      volumes:
        - name: local-path
          hostPath:
            path: /usr/local/data
        - name: samba-config
          configMap:
            name: samba-config