apiVersion: piraeus.io/v1
kind: LinstorSatelliteConfiguration
metadata:
  name: cozystack
spec:
  internalTLS:
    certManager:
      name: linstor-internal-ca
      kind: Issuer
  podTemplate:
    spec:
      # host-network is recommended by Piraeus while it is not default in the upstream
      hostNetwork: true
      containers:
      - name: linstor-satellite
        securityContext:
          # real-world installations need some debugging from time to time
          readOnlyRootFilesystem: false
