fiveg-core.yaml

# Stand-in 5G core NFs — the actuation target for the 301 loop.
#
# Rome has no live 5G core, so the loop acts on stand-in AMF/SMF/UPF
# Deployments (documented honestly: minimal pods, real Kubernetes
# objects). The mechanics the course teaches — a scoped ServiceAccount
# that can touch ONLY this namespace, real scale/rolling-restart
# actions, observable rollout state, rollback — are fully real; only
# the NF payload is a placeholder, consistent with the published
# synthetic telemetry the whole program uses. On a cluster with a real
# core (or open5gs), point the same playbooks at it.
apiVersion: v1
kind: Namespace
metadata:
  name: fiveg-core
  labels:
    app.kubernetes.io/part-of: agent-school-target
---
apiVersion: apps/v1
kind: Deployment
metadata:
  name: amf
  namespace: fiveg-core
  labels: {app: amf, nf: amf}
spec:
  replicas: 2
  selector:
    matchLabels: {app: amf}
  template:
    metadata:
      labels: {app: amf, nf: amf}
    spec:
      containers:
        - name: amf
          image: registry.access.redhat.com/ubi9/ubi-minimal:latest
          command: [/bin/sh, -c, "echo AMF stand-in up; sleep infinity"]
          resources:
            requests: {cpu: 10m, memory: 32Mi}
            limits: {cpu: 50m, memory: 64Mi}
          securityContext:
            allowPrivilegeEscalation: false
            capabilities: {drop: [ALL]}
            runAsNonRoot: true
            seccompProfile: {type: RuntimeDefault}
---
apiVersion: apps/v1
kind: Deployment
metadata:
  name: smf
  namespace: fiveg-core
  labels: {app: smf, nf: smf}
spec:
  replicas: 1
  selector:
    matchLabels: {app: smf}
  template:
    metadata:
      labels: {app: smf, nf: smf}
    spec:
      containers:
        - name: smf
          image: registry.access.redhat.com/ubi9/ubi-minimal:latest
          command: [/bin/sh, -c, "echo SMF stand-in up; sleep infinity"]
          resources:
            requests: {cpu: 10m, memory: 32Mi}
            limits: {cpu: 50m, memory: 64Mi}
          securityContext:
            allowPrivilegeEscalation: false
            capabilities: {drop: [ALL]}
            runAsNonRoot: true
            seccompProfile: {type: RuntimeDefault}
---
apiVersion: apps/v1
kind: Deployment
metadata:
  name: upf
  namespace: fiveg-core
  labels: {app: upf, nf: upf}
spec:
  replicas: 2
  selector:
    matchLabels: {app: upf}
  template:
    metadata:
      labels: {app: upf, nf: upf}
    spec:
      containers:
        - name: upf
          image: registry.access.redhat.com/ubi9/ubi-minimal:latest
          command: [/bin/sh, -c, "echo UPF stand-in up; sleep infinity"]
          resources:
            requests: {cpu: 10m, memory: 32Mi}
            limits: {cpu: 50m, memory: 64Mi}
          securityContext:
            allowPrivilegeEscalation: false
            capabilities: {drop: [ALL]}
            runAsNonRoot: true
            seccompProfile: {type: RuntimeDefault}