apiVersion: kubevirt.io/v1
kind: VirtualMachine
metadata:
  name: fortigate-s3
  namespace: ${TENANT_NAMESPACE}
spec:
  dataVolumeTemplates:
    - metadata:
        name: fortigate-rootdisk-s3
      spec:
        source:
          http:
            url: https://glacier-1.kvant.cloud/ocp-virt-images/sources/fortios_7_6_3.qcow2
            secretRef: s3-virt-credentials
        storage:
          resources:
            requests:
              storage: 30Gi
  runStrategy: Always
  template:
    metadata:
      labels:
        kubevirt.io/domain: fortigate-s3
    spec:
      domain:
        cpu:
          cores: 2
        memory:
          guest: 4Gi
        features:
          acpi: {}
          smm:
            enabled: true
        firmware:
          bootloader:
            efi:
              secureBoot: true
        devices:
          rng: {}
          networkInterfaceMultiqueue: true
          interfaces:
            - name: default
              masquerade: {}
              ports:
                - port: 443
                - port: 22
          disks:
            - disk:
                bus: sata
              name: rootdisk
        resources:
          requests:
            memory: 4Gi
            cpu: 2
          limits:
            memory: 4Gi
            cpu: 2
      networks:
        - name: default
          pod: {}
      terminationGracePeriodSeconds: 180
      volumes:
        - name: rootdisk
          dataVolume:
            name: fortigate-rootdisk-s3