From dbed38c281ea0fc17ea38d57272429dd5ecbc68f Mon Sep 17 00:00:00 2001
From: jponton <jponton@gradiant.org>
Date: Wed, 9 Jul 2025 21:56:00 +0200
Subject: [PATCH 1/3] annotations and gtpudev

---
 README.md                                     |   6 +-
 api/v1/open5gs_types.go                       |  12 +-
 api/v1/zz_generated.deepcopy.go               |   7 ++
 charts/open5gs-operator/Chart.yaml            |   4 +-
 .../templates/open5gs-crd.yaml                |  78 +++++++++++++
 charts/open5gs-operator/values.yaml           |   2 +-
 .../crd/bases/net.gradiant.org_open5gses.yaml |  78 +++++++++++++
 config/manager/kustomization.yaml             |   2 +-
 config/samples/net_v1_open5gs.yaml            |   3 +
 internal/controller/open5gs_controller.go     |  54 ++++++++-
 internal/controller/open5gs_resources.go      |  11 +-
 open5gs-operator-1.0.3.tgz                    | Bin 3597 -> 0 bytes
 open5gs-operator-1.0.4.tgz                    | Bin 0 -> 3640 bytes
 test/suite_1/suite_1_test.go                  |   2 +-
 values.yaml                                   | 103 ++++++++++++++++++
 15 files changed, 344 insertions(+), 18 deletions(-)
 delete mode 100644 open5gs-operator-1.0.3.tgz
 create mode 100644 open5gs-operator-1.0.4.tgz
 create mode 100644 values.yaml

diff --git a/README.md b/README.md
index 2457db9..c6d783f 100644
--- a/README.md
+++ b/README.md
@@ -29,9 +29,9 @@ The operator provides full management of Open5GS subscribers, including configur
 
 ## How to Install
 
-To install by using Helm, you can use the Helm chart provided in the `charts` directory or the open5gs-operator-1.0.1.tgz file. The chart is also available in the Gradiant Charts repository.
+To install by using Helm, you can use the Helm chart provided in the `charts` directory or the open5gs-operator-1.0.4.tgz file. The chart is also available in the Gradiant Charts repository.
 ```bash
-helm install open5gs-operator oci://registry-1.docker.io/gradiantcharts/open5gs-operator --version 1.0.1
+helm install open5gs-operator oci://registry-1.docker.io/gradiantcharts/open5gs-operator --version 1.0.4
 ```
 
 To uninstall the operator, run:
@@ -112,4 +112,6 @@ A complete demo with UERANSIM is available at [this link](https://gradiant.githu
 7. The `webuiImage` field in the CR specifies the version of the Open5GS WebUI image. If not specified, the operator defaults to version `docker.io/gradiant/open5gs-webui:2.7.5`.
 8. The `mongoDBVersion` field in the CR specifies the version of the MongoDB image. If not specified, the operator defaults to version `bitnami/mongodb:8.0.6-debian-12-r0`.
 9. Components with metric support can generate a `ServiceMonitor` CR to expose metrics to Prometheus. However, ensure that the `ServiceMonitor` CRD is installed in the cluster; otherwise, the operator will encounter an error and fail to create the resource. To create a ServiceMonitor, set the `serviceMonitor` field to `true` in the CR for the desired component.
+10. **UPF Deployment Annotations:** The annotations for the UPF Deployment are managed exclusively through the `upf.deploymentAnnotations` field in the CR. Any annotation not present in this field will be automatically reconciled by the operator (added or removed as needed), so manual changes to annotations will not persist unless reflected in the CR.
+11. **UPF GTP-U Interface:** The GTP-U network interface used by the UPF is set via the `upf.gtpuDev` field in the CR (e.g., `gtpuDev: "eth0"`). By default, the UPF uses the `eth0` interface.
 
diff --git a/api/v1/open5gs_types.go b/api/v1/open5gs_types.go
index 8f80522..d55a834 100644
--- a/api/v1/open5gs_types.go
+++ b/api/v1/open5gs_types.go
@@ -46,11 +46,13 @@ type Open5GSSlice struct {
 }
 
 type Open5GSFunction struct {
-	Enabled        *bool            `json:"enabled,omitempty" default:"true"`
-	ServiceAccount *bool            `json:"serviceAccount,omitempty" default:"false"`
-	Metrics        *bool            `json:"metrics,omitempty" default:"true"`
-	ServiceMonitor *bool            `json:"serviceMonitor,omitempty" default:"false"`
-	Service        []Open5GSService `json:"service,omitempty" default:"{\"name\":\"\",\"port\":0,\"serviceType\":\"\"}"`
+	Enabled               *bool             `json:"enabled,omitempty" default:"true"`
+	ServiceAccount        *bool             `json:"serviceAccount,omitempty" default:"false"`
+	Metrics               *bool             `json:"metrics,omitempty" default:"true"`
+	ServiceMonitor        *bool             `json:"serviceMonitor,omitempty" default:"false"`
+	Service               []Open5GSService  `json:"service,omitempty" default:"{\"name\":\"\",\"port\":0,\"serviceType\":\"\"}"`
+	GTPUDev               string            `json:"gtpuDev,omitempty" default:"eth0"`
+	DeploymentAnnotations map[string]string `json:"deploymentAnnotations,omitempty"`
 }
 
 type Open5GSService struct {
diff --git a/api/v1/zz_generated.deepcopy.go b/api/v1/zz_generated.deepcopy.go
index 119b35b..7ce0290 100644
--- a/api/v1/zz_generated.deepcopy.go
+++ b/api/v1/zz_generated.deepcopy.go
@@ -89,6 +89,13 @@ func (in *Open5GSFunction) DeepCopyInto(out *Open5GSFunction) {
 		*out = make([]Open5GSService, len(*in))
 		copy(*out, *in)
 	}
+	if in.DeploymentAnnotations != nil {
+		in, out := &in.DeploymentAnnotations, &out.DeploymentAnnotations
+		*out = make(map[string]string, len(*in))
+		for key, val := range *in {
+			(*out)[key] = val
+		}
+	}
 }
 
 // DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new Open5GSFunction.
diff --git a/charts/open5gs-operator/Chart.yaml b/charts/open5gs-operator/Chart.yaml
index 645c51e..c97990e 100644
--- a/charts/open5gs-operator/Chart.yaml
+++ b/charts/open5gs-operator/Chart.yaml
@@ -2,5 +2,5 @@ apiVersion: v2
 name: open5gs-operator
 description: A Helm chart for Kubernetes
 type: application
-version: 1.0.3
-appVersion: "1.0.3"
+version: 1.0.4
+appVersion: "1.0.4"
diff --git a/charts/open5gs-operator/templates/open5gs-crd.yaml b/charts/open5gs-operator/templates/open5gs-crd.yaml
index 05d9a31..a67ee79 100644
--- a/charts/open5gs-operator/templates/open5gs-crd.yaml
+++ b/charts/open5gs-operator/templates/open5gs-crd.yaml
@@ -42,8 +42,14 @@ spec:
             properties:
               amf:
                 properties:
+                  deploymentAnnotations:
+                    additionalProperties:
+                      type: string
+                    type: object
                   enabled:
                     type: boolean
+                  gtpuDev:
+                    type: string
                   metrics:
                     type: boolean
                   service:
@@ -62,8 +68,14 @@ spec:
                 type: object
               ausf:
                 properties:
+                  deploymentAnnotations:
+                    additionalProperties:
+                      type: string
+                    type: object
                   enabled:
                     type: boolean
+                  gtpuDev:
+                    type: string
                   metrics:
                     type: boolean
                   service:
@@ -82,8 +94,14 @@ spec:
                 type: object
               bsf:
                 properties:
+                  deploymentAnnotations:
+                    additionalProperties:
+                      type: string
+                    type: object
                   enabled:
                     type: boolean
+                  gtpuDev:
+                    type: string
                   metrics:
                     type: boolean
                   service:
@@ -124,8 +142,14 @@ spec:
                 type: object
               mongoDB:
                 properties:
+                  deploymentAnnotations:
+                    additionalProperties:
+                      type: string
+                    type: object
                   enabled:
                     type: boolean
+                  gtpuDev:
+                    type: string
                   metrics:
                     type: boolean
                   service:
@@ -146,8 +170,14 @@ spec:
                 type: string
               nrf:
                 properties:
+                  deploymentAnnotations:
+                    additionalProperties:
+                      type: string
+                    type: object
                   enabled:
                     type: boolean
+                  gtpuDev:
+                    type: string
                   metrics:
                     type: boolean
                   service:
@@ -166,8 +196,14 @@ spec:
                 type: object
               nssf:
                 properties:
+                  deploymentAnnotations:
+                    additionalProperties:
+                      type: string
+                    type: object
                   enabled:
                     type: boolean
+                  gtpuDev:
+                    type: string
                   metrics:
                     type: boolean
                   service:
@@ -188,8 +224,14 @@ spec:
                 type: string
               pcf:
                 properties:
+                  deploymentAnnotations:
+                    additionalProperties:
+                      type: string
+                    type: object
                   enabled:
                     type: boolean
+                  gtpuDev:
+                    type: string
                   metrics:
                     type: boolean
                   service:
@@ -208,8 +250,14 @@ spec:
                 type: object
               scp:
                 properties:
+                  deploymentAnnotations:
+                    additionalProperties:
+                      type: string
+                    type: object
                   enabled:
                     type: boolean
+                  gtpuDev:
+                    type: string
                   metrics:
                     type: boolean
                   service:
@@ -228,8 +276,14 @@ spec:
                 type: object
               smf:
                 properties:
+                  deploymentAnnotations:
+                    additionalProperties:
+                      type: string
+                    type: object
                   enabled:
                     type: boolean
+                  gtpuDev:
+                    type: string
                   metrics:
                     type: boolean
                   service:
@@ -248,8 +302,14 @@ spec:
                 type: object
               udm:
                 properties:
+                  deploymentAnnotations:
+                    additionalProperties:
+                      type: string
+                    type: object
                   enabled:
                     type: boolean
+                  gtpuDev:
+                    type: string
                   metrics:
                     type: boolean
                   service:
@@ -268,8 +328,14 @@ spec:
                 type: object
               udr:
                 properties:
+                  deploymentAnnotations:
+                    additionalProperties:
+                      type: string
+                    type: object
                   enabled:
                     type: boolean
+                  gtpuDev:
+                    type: string
                   metrics:
                     type: boolean
                   service:
@@ -288,8 +354,14 @@ spec:
                 type: object
               upf:
                 properties:
+                  deploymentAnnotations:
+                    additionalProperties:
+                      type: string
+                    type: object
                   enabled:
                     type: boolean
+                  gtpuDev:
+                    type: string
                   metrics:
                     type: boolean
                   service:
@@ -308,8 +380,14 @@ spec:
                 type: object
               webui:
                 properties:
+                  deploymentAnnotations:
+                    additionalProperties:
+                      type: string
+                    type: object
                   enabled:
                     type: boolean
+                  gtpuDev:
+                    type: string
                   metrics:
                     type: boolean
                   service:
diff --git a/charts/open5gs-operator/values.yaml b/charts/open5gs-operator/values.yaml
index ca27f80..49485b1 100644
--- a/charts/open5gs-operator/values.yaml
+++ b/charts/open5gs-operator/values.yaml
@@ -9,7 +9,7 @@ controllerManager:
         - ALL
     image:
       repository: gradiant/open5gs-operator
-      tag: 1.0.3
+      tag: 1.0.4
     resources:
       requests:
         cpu: 100m
diff --git a/config/crd/bases/net.gradiant.org_open5gses.yaml b/config/crd/bases/net.gradiant.org_open5gses.yaml
index ae9d2a3..c6edaad 100644
--- a/config/crd/bases/net.gradiant.org_open5gses.yaml
+++ b/config/crd/bases/net.gradiant.org_open5gses.yaml
@@ -41,8 +41,14 @@ spec:
             properties:
               amf:
                 properties:
+                  deploymentAnnotations:
+                    additionalProperties:
+                      type: string
+                    type: object
                   enabled:
                     type: boolean
+                  gtpuDev:
+                    type: string
                   metrics:
                     type: boolean
                   service:
@@ -61,8 +67,14 @@ spec:
                 type: object
               ausf:
                 properties:
+                  deploymentAnnotations:
+                    additionalProperties:
+                      type: string
+                    type: object
                   enabled:
                     type: boolean
+                  gtpuDev:
+                    type: string
                   metrics:
                     type: boolean
                   service:
@@ -81,8 +93,14 @@ spec:
                 type: object
               bsf:
                 properties:
+                  deploymentAnnotations:
+                    additionalProperties:
+                      type: string
+                    type: object
                   enabled:
                     type: boolean
+                  gtpuDev:
+                    type: string
                   metrics:
                     type: boolean
                   service:
@@ -123,8 +141,14 @@ spec:
                 type: object
               mongoDB:
                 properties:
+                  deploymentAnnotations:
+                    additionalProperties:
+                      type: string
+                    type: object
                   enabled:
                     type: boolean
+                  gtpuDev:
+                    type: string
                   metrics:
                     type: boolean
                   service:
@@ -145,8 +169,14 @@ spec:
                 type: string
               nrf:
                 properties:
+                  deploymentAnnotations:
+                    additionalProperties:
+                      type: string
+                    type: object
                   enabled:
                     type: boolean
+                  gtpuDev:
+                    type: string
                   metrics:
                     type: boolean
                   service:
@@ -165,8 +195,14 @@ spec:
                 type: object
               nssf:
                 properties:
+                  deploymentAnnotations:
+                    additionalProperties:
+                      type: string
+                    type: object
                   enabled:
                     type: boolean
+                  gtpuDev:
+                    type: string
                   metrics:
                     type: boolean
                   service:
@@ -187,8 +223,14 @@ spec:
                 type: string
               pcf:
                 properties:
+                  deploymentAnnotations:
+                    additionalProperties:
+                      type: string
+                    type: object
                   enabled:
                     type: boolean
+                  gtpuDev:
+                    type: string
                   metrics:
                     type: boolean
                   service:
@@ -207,8 +249,14 @@ spec:
                 type: object
               scp:
                 properties:
+                  deploymentAnnotations:
+                    additionalProperties:
+                      type: string
+                    type: object
                   enabled:
                     type: boolean
+                  gtpuDev:
+                    type: string
                   metrics:
                     type: boolean
                   service:
@@ -227,8 +275,14 @@ spec:
                 type: object
               smf:
                 properties:
+                  deploymentAnnotations:
+                    additionalProperties:
+                      type: string
+                    type: object
                   enabled:
                     type: boolean
+                  gtpuDev:
+                    type: string
                   metrics:
                     type: boolean
                   service:
@@ -247,8 +301,14 @@ spec:
                 type: object
               udm:
                 properties:
+                  deploymentAnnotations:
+                    additionalProperties:
+                      type: string
+                    type: object
                   enabled:
                     type: boolean
+                  gtpuDev:
+                    type: string
                   metrics:
                     type: boolean
                   service:
@@ -267,8 +327,14 @@ spec:
                 type: object
               udr:
                 properties:
+                  deploymentAnnotations:
+                    additionalProperties:
+                      type: string
+                    type: object
                   enabled:
                     type: boolean
+                  gtpuDev:
+                    type: string
                   metrics:
                     type: boolean
                   service:
@@ -287,8 +353,14 @@ spec:
                 type: object
               upf:
                 properties:
+                  deploymentAnnotations:
+                    additionalProperties:
+                      type: string
+                    type: object
                   enabled:
                     type: boolean
+                  gtpuDev:
+                    type: string
                   metrics:
                     type: boolean
                   service:
@@ -307,8 +379,14 @@ spec:
                 type: object
               webui:
                 properties:
+                  deploymentAnnotations:
+                    additionalProperties:
+                      type: string
+                    type: object
                   enabled:
                     type: boolean
+                  gtpuDev:
+                    type: string
                   metrics:
                     type: boolean
                   service:
diff --git a/config/manager/kustomization.yaml b/config/manager/kustomization.yaml
index c3550ec..1aa8145 100644
--- a/config/manager/kustomization.yaml
+++ b/config/manager/kustomization.yaml
@@ -5,4 +5,4 @@ kind: Kustomization
 images:
 - name: controller
   newName: gradiant/open5gs-operator
-  newTag: 1.0.1
+  newTag: 1.0.4
diff --git a/config/samples/net_v1_open5gs.yaml b/config/samples/net_v1_open5gs.yaml
index 9283f3f..808a3a6 100644
--- a/config/samples/net_v1_open5gs.yaml
+++ b/config/samples/net_v1_open5gs.yaml
@@ -60,6 +60,9 @@ spec:
     metrics: true
     serviceMonitor: true
     serviceAccount: true
+    deploymentAnnotations:
+      k8s.v1.cni.cncf.io/networks: upf-dataplane-5
+    gtpuDev: "eth0"
     service:
       - name: pfcp
         serviceType: ClusterIP
diff --git a/internal/controller/open5gs_controller.go b/internal/controller/open5gs_controller.go
index ab68162..77330c8 100644
--- a/internal/controller/open5gs_controller.go
+++ b/internal/controller/open5gs_controller.go
@@ -754,7 +754,8 @@ func (r *Open5GSReconciler) reconcileUDR(ctx context.Context, req ctrl.Request,
 
 func (r *Open5GSReconciler) reconcileUPF(ctx context.Context, req ctrl.Request, open5gs *netv1.Open5GS, logger logr.Logger) error {
 	componentName := "UPF"
-	configMap := CreateUPFConfigMap(req.Namespace, open5gs.Name, open5gs.Spec.Configuration, *open5gs.Spec.UPF.Metrics)
+	gtpuDev := open5gs.Spec.UPF.GTPUDev
+	configMap := CreateUPFConfigMap(req.Namespace, open5gs.Name, open5gs.Spec.Configuration, *open5gs.Spec.UPF.Metrics, gtpuDev)
 	entrypointConfigMap := CreateUPFEntrypointConfigMap(req.Namespace, open5gs.Name)
 
 	envVars := []corev1.EnvVar{}
@@ -794,7 +795,7 @@ func (r *Open5GSReconciler) reconcileUPF(ctx context.Context, req ctrl.Request,
 		serviceAccount = CreateServiceAccount(req.Namespace, open5gs.Name, componentName)
 		serviceAccountName = serviceAccount.Name
 	}
-	deployment := CreateUPFDeployment(req.Namespace, open5gs.Name, open5gs.Spec.Open5GSImage, envVars, *open5gs.Spec.UPF.Metrics, serviceAccountName)
+	deployment := CreateUPFDeployment(req.Namespace, open5gs.Name, open5gs.Spec.Open5GSImage, envVars, *open5gs.Spec.UPF.Metrics, serviceAccountName, open5gs.Spec.UPF.DeploymentAnnotations)
 	return r.reconcileComponent(ctx, open5gs, componentName, logger, configMap, deployment, services, serviceMonitor, serviceAccount)
 }
 
@@ -990,6 +991,52 @@ func reconcileDeployment(ctx context.Context, r *Open5GSReconciler, open5gs *net
 			return nil
 		}
 
+		upfDeploymentName := open5gs.Name + "-upf"
+		if foundDeployment.Name == upfDeploymentName {
+			allowedAnnotations := map[string]struct{}{"open5gs/configmap-hash": {}}
+			if open5gs.Spec.UPF.DeploymentAnnotations != nil {
+				for k := range open5gs.Spec.UPF.DeploymentAnnotations {
+					allowedAnnotations[k] = struct{}{}
+				}
+			}
+
+			newAnnotations := make(map[string]string)
+			newAnnotations["open5gs/configmap-hash"] = configMapHash
+			if open5gs.Spec.UPF.DeploymentAnnotations != nil {
+				for k, v := range open5gs.Spec.UPF.DeploymentAnnotations {
+					newAnnotations[k] = v
+				}
+			}
+
+			current := foundDeployment.Spec.Template.Annotations
+			needUpdate := false
+			if len(current) != len(newAnnotations) {
+				needUpdate = true
+			} else {
+				for k, v := range newAnnotations {
+					if current[k] != v {
+						needUpdate = true
+						break
+					}
+				}
+				for k := range current {
+					if _, ok := newAnnotations[k]; !ok {
+						needUpdate = true
+						break
+					}
+				}
+			}
+			if needUpdate {
+				foundDeployment.Spec.Template.Annotations = newAnnotations
+				if err := r.Client.Update(ctx, foundDeployment); err != nil {
+					logger.Error(err, "Failed to update UPF Deployment annotations", "component", componentName)
+					return err
+				}
+				logger.Info("UPF Deployment annotations reconciled", "component", componentName)
+			}
+			return nil
+		}
+
 		if !deploymentEqual(deployment, foundDeployment) || foundDeployment.Spec.Template.Annotations["open5gs/configmap-hash"] != configMapHash {
 			foundDeployment.Spec = deployment.Spec
 			foundDeployment.Spec.Template.Annotations["open5gs/configmap-hash"] = configMapHash
@@ -1316,6 +1363,9 @@ func setDefaultValues(open5gs *netv1.Open5GS) {
 		defaultWebUIServiceAccount := false
 		open5gs.Spec.WebUI.ServiceAccount = &defaultWebUIServiceAccount
 	}
+	if open5gs.Spec.UPF.GTPUDev == "" {
+		open5gs.Spec.UPF.GTPUDev = "eth0"
+	}
 
 }
 
diff --git a/internal/controller/open5gs_resources.go b/internal/controller/open5gs_resources.go
index 2efdcf5..da77970 100644
--- a/internal/controller/open5gs_resources.go
+++ b/internal/controller/open5gs_resources.go
@@ -572,7 +572,7 @@ udr:
 	}
 }
 
-func CreateUPFConfigMap(namespace, open5gsName string, configuration netv1.Open5GSConfiguration, metrics bool) *corev1.ConfigMap {
+func CreateUPFConfigMap(namespace, open5gsName string, configuration netv1.Open5GSConfiguration, metrics bool, gtpuDev string) *corev1.ConfigMap {
 	metricsConfig := `
   `
 	if metrics {
@@ -582,6 +582,9 @@ func CreateUPFConfigMap(namespace, open5gsName string, configuration netv1.Open5
    - dev: eth0
      port: 9090`
 	}
+	if gtpuDev == "" {
+		gtpuDev = "eth0"
+	}
 	return &corev1.ConfigMap{
 		ObjectMeta: metav1.ObjectMeta{
 			Name:      open5gsName + "-upf",
@@ -603,8 +606,7 @@ upf:
     client:
   gtpu:
     server:
-    - dev: eth0` +
-				metricsConfig + `
+    - dev: ` + gtpuDev + metricsConfig + `
   session:
     -
       dev: ogstun
@@ -652,7 +654,7 @@ $@
 	}
 }
 
-func CreateUPFDeployment(namespace, open5gsName, image string, envVars []corev1.EnvVar, metrics bool, serviceAccountName string) *appsv1.Deployment {
+func CreateUPFDeployment(namespace, open5gsName, image string, envVars []corev1.EnvVar, metrics bool, serviceAccountName string, deploymentAnnotations map[string]string) *appsv1.Deployment {
 	var ports []corev1.ContainerPort
 	if metrics {
 		ports = []corev1.ContainerPort{
@@ -712,6 +714,7 @@ func CreateUPFDeployment(namespace, open5gsName, image string, envVars []corev1.
 						"app.kubernetes.io/instance": open5gsName,
 						"app.kubernetes.io/name":     "upf",
 					},
+					Annotations: deploymentAnnotations,
 				},
 				Spec: corev1.PodSpec{
 					ServiceAccountName: serviceAccountName,
diff --git a/open5gs-operator-1.0.3.tgz b/open5gs-operator-1.0.3.tgz
deleted file mode 100644
index f5a687055ec00cdb7499c2d09ee81c5dc29c379f..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 3597
zcmV+o4)XCIiwG0|00000|0w_~VMtOiV@ORlOnEsqVl!4SWK%V1T2nbTPgYhoO;>Dc
zVQyr3R8em|NM&qo0PH<obK5wQdFHR^Q*LW!ax3b?jy<KSd+^x4IoBjk%JSsuYHKS6
zku3=u5a0ly636lV_A3A+MNy<aEKAPpvL6x(1R9M-f1wG$B1ZmtqS_)xNwkoi^C^+q
zzatTQ@l??5cDpCX$M*kjw_E<d+wb;Y^o~zYk55nfN4@@wZtwWG*LwloC!=5mBuW$c
zqPufn<-z?)fW-6zN<{@9z^w0)IL?3e{H}lGg{T5aV{MDh;J=YY5EvPOv5@dvGD68w
zqw+Y3Z~$d_^7LJd10ZqCXg~}WZ?@RMb93Nd8<zBcMp%OCNe#d{{eOLYQr7>IlYXQB
zhk!tEEd^sJ-x5wHC<h)uG=Bsja-!T*8`^D#Bt+RphJm()1_7ZQ<q(5JQhj$WxW+Hq
zH31-uiO=sPol%Apyi@^U#2J$@VG7e)0g1_oGO8)6tR+AwMLhr2hO;+s>@OOT31%-O
z#zIjo<lO)!l7y6S-B~h2uC6AN%<Q<PN+dFvcPa6Y1eGq35X8v<dfjf6mqZxZzIy$i
z-%{^WZUE0&qBP125fRD<5V)T{69IWTSNi0zr2iVDm=TSt^KptSMyY%q?>2xn`hWDg
z-!19?X}8zt|3TpXzVphv{1Ou$f}SE6FAidCpRJqsy;q%w2k-vA4Iz#xM`)F0#y5>x
z(4JQ#3De-aQ1aSf^glSaVrssdp_DX4_y$@gJb;rU`$(f<G9J?}&}z3J#f3aHkDev-
zTq4m3B=2FIFm?xjB!tm1#n40<b^yNjKj?7V`r7nh2BTnv0Z9~s5)l@H7dPxNMHVU`
z5`oc(Y79XO&{L}5$I+c-$;I{1)TMj^D#qX^-@6)vM21AAyi4t&N`oX@Mm2n<jKK&Y
zQHD+h#1fxUyPm_Q@*<b%IA?11GG}aBrS|<MjAtsx^Y3;Lga6!oX6H2K>~Ki@8^<fx
zHluT)a7*H1Nx2?F>o2PP7u71^a-D82XVs4j(pQ*PqcdqRYo^prZ7L_O79%5Mn@q2*
zKA+q2n2PLn&uNej-;DcXBtU5WM+;gXTiYv@h$6uqscHjKT}4Oh6j|h}X~&X3fctx(
zJYY$<Vu-#YVnsz|V+$eQq#gMMX-Y?bmakIGI}*qK+ztCwbn+F({e4A~Z}3MVG?uur
zjKxJkVS9Av5M`1zL^-2DxxM4&FeQF-ewK&ZuB62+u2%BRnFqgmER-uvcz}x|DJo%=
ztd|{vN=HtDKqOon>zF9qXppwynQM1lXUG<-`GKRN<W_#HXTjV``ajhn<;5`<>_~>b
zl|HmKLa<~jp4*>q3oGKk5Mw6pBILWKgVw}<{nK7~{dfBMxQYJ`0>%6fiDT87^}J7%
zhXc6Cr{9ZElaOd)mPH#_qJkR2!$W(%#B8SvOAk`}ILMcfQm}T+2*&|b*0+|Twnvux
zif_Ov50Ps)HtJ}CG}DRkk~AR7*}qh=m)5?1R?Rd8$V{`NG9o&dzA2Es8R6?lUv_u%
zA)GimGL=l}C`^U{wm{ORMD0S>&yFm+y60SIyPhvlU|dh2S;+;ZcD0=+3<gjnD4VH;
zoPrvFmo5Hn9>P+s#s89st(e9XuWy=E({1{QBErLBdZDw(AOPgE;(I6hzy1Ep<<0fw
z?d9;}`J3N|x0g2`FW$X9ySmP60@x&)l{FV?WTe()3yO5P+{S7#&BkZz`tt+`JUk4x
zXsF4gK=Ze9c)u8BWz`%L%AA^KQns6+yj@|Mdfft5g`QO@!L(gZb$O}<4$MiIcU<mv
zKIVj<scXS+gwO*Mbz|P59PK=T!8D*zMwDB1`&E(v-=m}=9AY4Ns0Pq`gx6W&|BI<U
zDtKFtNbsmgV4eT(9+kfT^m|85{^u}I^#68(NusAh(yvy^{7*l-1yvRl+z5s{h677t
zWl$E~*dtxNOc<(x*9H>PU!_Q5i>wW;mRHL3wvB@s(@8{P<$+nkkJ9o9YWqK<$~}BG
zPTw`LixK;n#9{Ur=kG&gsByXbKnNM8N}IBCnI5|w+dnN;tiTy^UFy1k-yv<c+ukE2
z<rm6B$|rjem{E%PDda{lyuq=-kg;pU06l<$CS=3;Vb}5e;HhNv4-B-GVAsQN!Hqnw
zuVq*ALyAbnBuKF><O6IuJUsmH+?J_<L%<6Ep9;+5{eA{({QvRm)7Rzo|7rK6@&AW_
zEv<UGY<Yq(AeXK^yMGc}Ctvb<^W0Xw>r1_8r7xcQ+JXai4tl2m<UrlWX3CXDu4jTJ
z5eAIV==&h$d8kO2Y-wWqS!vjR=aJx43rYFJ4}?Tvmd#NuJ!$Rzlf_Z{*#-_@$jLHA
zsWmtNi?*PpGp3v{`W4G8N_*J}x6(u>H4B5K@jSk#L@iPOoJ_Uk)bjQDDXW^5C!lKk
zMOMKbKh0XJ=#`&;ja7^`9<}@_4yRdSRl$n*KYJC(aJLVDtK<LvNw>TF{jZ7t4+D$e
z|0sUZ$jvXcY-<vwMRb#z#S0u$PVIi~Ws8&hFTcXDE`2g8D9{AC{YElMC<{?8?B$qs
z{ob+PeF}4weQTOHLsUVeRbNM*8~r<j{MVr^F~<D2V(A-a-2q~jNWumSfeL`4e3CFC
z^KuVB1tP`)<mMoB-b7_=$-XwtdJaV}#VG&eXV9Fzzxr@ATqp)u*sPxt2UOY38?LV1
zwQqi=q`=wxtGszE4eu8B;985FiAbTe)Y-T8!aFc{v#&>PTZp3~9V3S6klfZ1sz72a
zQ6YDtVTuU{VGXulLT#)zN(E{v5*8ZynW5AmF%T0@zvj4=+rEcj?U@G3HA+sH`#kqo
zAUrH#j>sKIG<`zC3;5Da@uk{tg+!oyECw*uI#z>DXF_$RIDv?wgj0Rju>wv<iHV{+
zA<mF>6rHq*45n0Lpc9E564SOF2)CNyN8!sn0$J$Rou^P*I@g?mmC`My$H=dd43eU9
zL!8foDKf0Pxg6f+v5=c7H!1U~OMJ=Z$8eMKF-q5NEJb8-A`fFhxpq6{7&UsSl2Jsp
z%6DLc7G<>O)^gZQls0q<%N4FToRbLIxpB0Iohvgds%<7=quDBd!!K5L>@B<~ei^Tr
z+EmSlF$N2o7NVlk=z=EN?%*n#unej--T;Zl<)T&9!G10$BZgtst88#1As7-~Q6oYv
zX;6uGedBbgTHTmxjB4<%8<7KRiEH21PI4uQx2EoHxN5|tT!BbQ?&^7!#=JZ6`>jh2
zJO;;#L6Af>qL)G=dNnxqBYLAo@-k>7uLj3{B+q>iNTfR(x1|h5L9mLPTE<5FaqT2d
zDyiI{slt`quW!d_P$#ZC%etyj-;F3sQK*`6ZH!|_3D@K?bGf3^Nbrfc_@%Lj4jOw{
zgJVDTFqOW_!~?8m5toe<PoWXo8XWr(TCSS-F@r|*YH;jF^wM<hRq<woa>Ggn#X%#o
zDKsKmgJVA;tAe<ZJO_>B)!^8Z<TbhN3>wL+!Lc97OTws;JO_>B)!^8d<W*p7B(I*j
zM)J17u}bpd#@nXQNL~$&{Yc(t93`}oJqL~K)!^8p>}{Klsln&=n=j(2+yi9mE$jjk
zBQwg!Zv&D@!n@@WtlnH^;OcsKd2<VA7Z+EzSMRRR-oWto?DqE|{MXgxn+wP<i&`cy
zy*aZAXA}#m3D*O-NjS73@(Ej@1xTDAM``b86CnZ_Ym^X)kdE)%PByAwOc~ZpMb-RD
z{3D^VYzW$pBkN~vsn89xa8ZQPLfX4N<|WB!=}OXc?&1Eyn~MPn0*p0=*X3=h_FU0?
zAFBNs2p&?m-xmJ%ch7Z<;fHLuDg5p4&%Fz|f#-q^_WxsO%;OHnfY;ssd~$MBzW<|l
z)ZG7Z5O}upzh&v#^D*F!Pk4PlXU*yk|2^saZ=nA(il2A724JoJ_qxma|GLrtL%_4^
ze<oeur~cPm!t<Rg^%k&R{}Y9Bw=;n2?*BMBEuH`CcaM9``M-m}KF|Nz!_xnBM*x3U
z>DqMZ7@&DmcN8!?VPA0?FmVVEcOuZxx%yO~rM5X5ScK+iU~@F^PkJ=a==;XU19S71
z!HOe-@pc<?X{0K$@hcj9!iv=6iuxk1*aN?^zO{C1(wiw`Zg7ked4LOSlzFKZ#w_KB
zuG0(mxBU1}pQK-tQlH;9v3=`RJ7p@qgRH<+c?x1**={S=TV%YKB)iGmZXEyblmlG1
z{y**ZO7VZc+i&uJ2Z85a|1U___mTtnF0aGdPvT%h{og4ExHkXSFR%am-Q%N1{|^D*
zh5mnUIlv12fAU1&K9zb4SfT%mcVg~v1=u?M@1LBO^M6ODP5$p7u<-YvGc7M&i?`Q5
z|MNH<e{Qz@)4-Dc`%`2Qop2%Xsrp!_|F4hA_kSOs^iLc8KLosl_e5)y+-5}Gyu;@y
za<B<_$|n$$;1ijk^1YXEJEaO#630Sn1!{_n!GwvC`|DVgPyPxL8PRlxCKjF+$_Wp>
zm%wr2vbaCS636rlhVYr{Dg4_{KD^`X4g|L?4M`BA1V%afo_{g?I5f*&?<J&vvGT+D
z5JD=I=TE5a*nb`Qo<I63JNDnKU^?lTf3lxy#yfLFBNBW{V!J&|d9Qr+Ird)pBl5|6
z<?F~i3rQ#5tN-&}!UrO$NEBRMTq@6xrLb87pN2>}uDTTe@cfwyM2MX~-5&#Npn(Sd
TrQrVq00960OHMgP0EPenANC!*

diff --git a/open5gs-operator-1.0.4.tgz b/open5gs-operator-1.0.4.tgz
new file mode 100644
index 0000000000000000000000000000000000000000..71700ac67bf0970b0f74f1af39ea9c78b988ee5d
GIT binary patch
literal 3640
zcmV-84#)8yiwG0|00000|0w_~VMtOiV@ORlOnEsqVl!4SWK%V1T2nbTPgYhoO;>Dc
zVQyr3R8em|NM&qo0PJ1=bKAC(&(HiT_MCguHupq*@wbj<?guya^*l|SjOFI$=FOW7
zM6M*ffB*}CN?gbHx8DFDDT<;f%ChCOC4NXK5?Jgm@Yw~H;9A7UkEg05Vw6M+*?m1D
zQv0_gVlN)6^m@JC$<dMhzt`)P|L+ZYgBShd-r?cV;COI4c+u-09iE=PfZn5VP*W16
ziG0!9xv#Qte~?0A`T?b)f)8On@JJlzKl^^qKk`CUfuymvx6a_dkwp-gIRX<Q;g@8L
zlA}iDaT4JW%Ja$7w=oWZ#4)1*F;u+yatF_?fxmWH!T+4F1l6M&fKB*6J~}Dm|KzyW
z;(s3{5L`>a7|OSVlPSuf2M{eT0f?L`ch!MTham}3c93D9?M*{~P>ynhK_aQXeJ!}g
zFWNN$AdHF6?<Jj6hEu#y0b#@$lL=u8(^>(E$(S;#DXOd`Kqy7L_|<{4H*f4O8j&ex
z4<yDyQ7z={5T=rZlyKc$F+;AdCezI9xTZ=ZGFWse@wWt(F0c^9$q@RzUX<U7FtUC1
z2S2{0-lyCEzGjKiD9=SiC?7)Le)>!V<ndhTqn8!@Ym8z>G^*~$8L}9q@^!qM02}as
zcs%Hp@PBF^xA@;fxx4GW@-Du_gomJK2*!(pnAmIU=6&x~_x|3yyX!!R6Uq?|%5%my
zjSir*s74Z|!FNl^D?`!$;M|I-`EHI<(h%V*XqoT;P7duQjYi32LchR4=KxY#$U}4K
zSvFrwBpQL_JxmhDZsE6tFgl?anpK7s!1w+K9c^1*n;wiX3dR_aL?I{<VPWy&#GX)O
zp#mZi7>%gL5VQb2qYAzs-&&QNUyV#%%BP@W41Vyv%LzziNK~r3)E=sIk!0^t4WB7v
zFh)p};Zp&z%%|LL*08C(tYtdMm6|=w6`NLB`@D(bnab(>yA@*ipUp>h!DFrtN5sE&
zx^itZK9_E8$y_Wc*AqDSo9g^c9h7LfPMgoO>dU3sR~S}<nRGF0hSUyiI!|0JM#jjR
z46m)e7~8T;MRmLDbde5Ujr(IHKsfl113372usx_m6bbHFRSj5m6&<fLWRb6CUCaIu
z?(Tr{fF)s#h`wW@rlPWI3nAa69r=aXluCb=?^4V&6370+4f|Ad^Bu<BT}6|x@LM7@
zmb9@-#jS$E&iK|5%4XIG<(vlP_D-9ll=<fREQ{Nz<i%~SYW3#KgI_HR<w_GC;Ibq|
z5LV6gvO`d*<Rl10!nLuEiNZ!g+J<MY-PJlnwp`5*92X_G^8I=hEUcve!#bk8D09J%
zWaJOhi-Sf4R&2#{`}1u}&H69In2Fm6`L5xh4eP(bX}`SxJ3T&Z*MEB{#rO}2W7VDa
zy-$>fLpaZe--}R_kZ5AIMGY)b0fumY-&t%iJL$&KgVa6_^DU$ltP?ZBaR`<5t)*Do
zBg=ioSKyR~$Tb`pIGRP8>BM+R8W82|UkdD%y|15DGfe?9)9kp6hz@3N3T!uHd=u-d
z?rtH%iQ^-KWXeZjFic@fEH!0n7q)(MY}wsC=R({4e1QYwdIHT#E-1CDojhPLgd#)P
zNG-(_)DXOE^Kau2mTN8kmqe^)7*o2wX;RI%=_85=4~yZ2?y`aakk5<H-PHf(*Pkw~
zuP$ybMjv0l`E_)2asBc9-P^OvtGp(F4Wik(=9U^6t81bKMZR2YqkfuZ^4YrnA^-yS
z_ron3YBDYG{I$HiUtVQp)tnN_np#9swi}_mU16B|y#iN-o>eKpv|Uf@;#5l-Sg^3@
zxZLeR=7gWAE5WaY&_lE8#=J#&wetuD(-e&|qTIsmXGsElkCKXTgn{6p8bbd8UZ=+Y
z7ejqi@Qxgl;6W>aP5!@kSbG06=pVN6pZ%1g|F;875<L@={%&WP|LI4!p~@Bo*Mi}W
z%Yl_?Wk?p?*aKa?Oc<)6*8vjKpQT7*ORNJ22VN=C+c6GiLZ=all?P@EKThvYQQQ9+
zRqo=mar&-_-Hh1FBo4F7IDZ}@LyfE52SUg&1#PO%RetPt?CE)_QU%VD>r&SR`i^L)
z)A1fKQ+}d6q<s1W6K0%JevEk|7+&MVP{`C(BcKORKtd+Yce~2-ou`uVzcA2t2D=_c
zOK#+0eXY8Z?@~f4CP7MVDIQ?&!~Okt&uy97vX4^Z|I-QcaKE3G4gUY=`1H8E|35iB
zYW@E{%9d6=-L^c!G9aH_Pwf6lY@K|`>n&ni>s?>!MJs*r!q*lYuyfEmEkO3veQbtY
zY2<n?SQ25t2#vlCR-T88bjy|owx5-Ur|&!xoN6H{pZbB2D9pAwTFXyb`{~)@sQv5!
zhcD!Gm7~-e>_J6a@Y0=7P8j_i%PLBH*@?E&L?>%D1}pMByr)F1aQ~c2wd}0b>+^F~
zH7bw5)%KgLf;)bky;jjHKmQ)9xY~Ho_NORLyTz(1HS7QEQ6R(JUI5mw{|^rbtLy*c
z-k@Fo@1rcg|D*UtBR9X)s;x<s7SVNT7SC})Iko4xS1nHNzx)cry7J1X0H7&y`;KIs
zP!^(GI?FNd`TZlm_Za3Vd)G8|hNyx`3tz{clm49{{`1J*F~<Ct;@vmSx&y>4k%SGG
z7AgRW@@c||%<p>uDiARaAvXu1^Cl`&OZK*D-ghK|8AkalKSSp1{pE+l(b8>zrNjCu
zb3m0nyy5EFQ~Ty;$_kvlzs#G*(&%pa46e1<*%T?<Ep_&_v-AuM-R$j=I~L-&NM*z@
z70Defp$a6%5*2bcHOy_oL0E(Bmq;6{jZ%S{iG+n_{>)KokQj(5r@!a4l{>zNVC|U(
z$~8((n0r0<cOX10QI5zhNHl#y!VC1$L-D2BZ-qpld?JQ0(>hkeZg)y`2An`dQNpRd
z?b-=W$B9`*cSD>b>nb|!5E;y<#y}?$yCkL^D+ss9@T2f$z5-e5)_qT*v~;dHD|VJ{
zF+67enwddTQclFhD41JDb=Mc8n|v+gM#>G!qUwrXvhgw6q<n(XwVOy0S(?bhSWvFr
zNjXLhE>$v)s8;z2Y|x@i_O-Pf_7J6AI)&v5mmFS`2-$1nX!ko-W>i$i3__#PD!;=o
zR(9$wJSe^yuNc}C=A#&cC8UL@s5Ds6MB5WwMH7~lYQ&pDqDlEyU3JG+7F0Q_Iu@`*
zJq)e$AnbiD$r>GQ)LT}NlQF}vn!IZ}7J?z+6*Z<hPR?;&*LW>w5o$?;HF9n0INg0$
zH>Mh+wfd?bBv-6+S^Kns&I>Hwn7X^s+AxAy1tKN6U9YQj8NZXh-@0hWLuk|pK@!!X
zsYO$Zrsgzigc!GAf)-3In3~h55yHKRN~HTJb4yr7LGZBY#~;>C;<S>>22B;#YJYt@
zMuT<Jb?3RR)<C}zXDJD_My|#*cAVjwJY+0uI*kOMiu0dZ6W^Nn*2Fiau^CX6K|H8e
z5tr>!tHoi9!{#(<gy5>(xIl}h7ER4*)CiHjz`88vf+;twR8SnWC~Q&KqOduQ8X;5=
zw_s|))PkuojXE&3?_8k;Qwyf%G-`xM!l(sP3#JxKjcL?^se)n)rfoQD!PJ!2pB_wc
zyUc6B)PkuwjT#|7<2a!$oLV@waB56r6P&h<sjs2uK9gLgQ+agV)>}HfF2+X6ho4@T
zNW$Ay3F^OzFy-=Uba8zHXXodaH<$0O&fdW2=IrLz5&YNX#hY`;bDXX+m?nI$q8Y_P
zYQpspt`iOi5&47%pan>rB1dV{3X2edOf*V}L`WyM?gI>}U_u$L8H%d$mH1miW!Z>y
zoJKZ}+R9BQW+A_s(n8u4b&EU6cqNm5I`(jP?=7YQ2?C5YhF9gUtL*3Si_fR*&p>cz
zdDRg9@lVfnjNymuBPsaDKcD;Kxj#W^@ck!-#?I`J24>UW|2R20Ea!jg58C{1dnwPB
z|D`;;o;VFm<1hTbom>O!l0Q7^_&31+oZ{!5(m-v*f4{ei|HBsl`zX(j|7>=BoA_Uo
zgz*~(^%i9_{u70Aw;T|g^1q#&mh!(3dPluB|Jz>5Q|5oL$#VX5DIk7T=_YR_4TO2J
zE)_(UVW}b;MB)hUFC&EEvpy??<+e=?Q7mn0h&DCEA2c<D!F%KM5V?8FN==H0c)O2D
zXrwA4^)(GXVMPqDroM<PK1HjoZ>`;iIAN-oYn-4&9^jH1Wqwx+W0vxyJLw->+VaK3
z`e^rt*z_Xb*!HdKPNY@5jHsbi`7z>Cg^lgB-Xe6oGPBzNXyf(&PBFku`~TBkzqI}z
z^!jc5Z!hJ!_y0??>syHde3R)=pC)k75dS;H05`_}2Ic+#pm*4B@xPDqP2m4qivd>P
z|Iq`1PYLQRN)7&(bE5B%0(KMr2PdcH_}}448~@u&DdImzc_}UOlm7X~hhhA=)%K?;
zEBN<k$RaxBLgHifu?hdjhvodwM<@N`7XSMwFX27W8YQ<8Q8(`Jd4?Qp0G{$G#3cAc
zrl@@HCEU!Y0+qzEkXnJ7A!9IQV(k7pD&^C^gG5F&ougR`&kFYm551Sbaq6PD-^UUs
z^b3aYnd%w*+Ydgx<Lnj$w=E4z5TgV}Ir^S|KKeK^+h6Y`q<^ve!|M@*R4UJ(Qr)%x
zI`%z({JZShf3q92Y1jOd{Zw<_T@V_R;8POYb5_cG<*U!J_sSoWPu?qEN9I~cI`v-t
zpZ5|z5J^R%;PU)Jd44Q~jS~1YMACKDrTCZU&s88o?Ec~Y7<60O(w4te`Tqa_0RR8_
KaMjWPkN^OI=}H#>

literal 0
HcmV?d00001

diff --git a/test/suite_1/suite_1_test.go b/test/suite_1/suite_1_test.go
index 8188de1..f607f22 100644
--- a/test/suite_1/suite_1_test.go
+++ b/test/suite_1/suite_1_test.go
@@ -44,7 +44,7 @@ var _ = Describe("controller", Ordered, func() {
 			var controllerPodName string
 			var err error
 
-			var projectimage = "gradiant/open5gs-operator:1.0.1"
+			var projectimage = "gradiant/open5gs-operator:1.0.4"
 
 			// By("building the manager(Operator) image")
 			// cmd := exec.Command("make", "docker-build", fmt.Sprintf("IMG=%s", projectimage))
diff --git a/values.yaml b/values.yaml
new file mode 100644
index 0000000..9a1f36d
--- /dev/null
+++ b/values.yaml
@@ -0,0 +1,103 @@
+dbURI: "mongodb://{{ .Release.Name }}-mongodb/open5gs"
+
+populate:
+  enabled: true
+  image:
+    registry: docker.io
+    repository: gradiant/open5gs-dbctl
+    tag: 0.10.3
+    pullPolicy: IfNotPresent
+  initCommands:
+    - open5gs-dbctl add_ue_with_slice 999700000053411 02366BDEC178628BC809841190A3F316 4BDB2D50BA9AFEC95D62928620EF6D34 internet 1 1b207
+  # example of initCommands:
+  #  - open5gs-dbctl add 999700000000001 465B5CE8B199B49FAA5F0A2EE238A6BC E8ED289DEBA952E4283B54E88E6183CA
+  #  - open5gs-dbctl add_ue_with_apn 999700000000002 465B5CE8B199B49FAA5F0A2EE238A6BC E8ED289DEBA952E4283B54E88E6183CA internet
+  #  - open5gs-dbctl add_ue_with_slice 999700000000003 465B5CE8B199B49FAA5F0A2EE238A6BC E8ED289DEBA952E4283B54E88E6183CA internet 1 111111
+
+# Common
+mongodb:
+  enabled: true
+  auth:
+    enabled: false
+smf:
+  enabled: true
+  config:
+    pcrf:
+      enabled: false
+upf:
+  enabled: true
+  config:
+    upf:
+      gtpu:
+        dev: net1
+  podAnnotations:
+    k8s.v1.cni.cncf.io/networks: upf-dataplane
+  nodeSelector:
+    kubernetes.io/hostname: solidsnake
+  containerSecurityContext:
+    enabled: true
+    runAsUser: 0
+    runAsGroup: 0
+webui:
+  enabled: true
+
+# 4G
+hss:
+  enabled: false
+mme:
+  enabled: false
+pcrf:
+  enabled: false
+sgwc:
+  enabled: false
+sgwu:
+  enabled: false
+
+# 5G
+amf:
+  enabled: true
+  config:
+    plmnList:
+      - plmn_id:
+          mcc: "999"
+          mnc: "70"
+        s_nssai:
+          - sst: 1
+            sd: "111111"
+          - sst: 1
+            sd: "01b207"
+  services:
+    ngap:
+      type: LoadBalancer
+ausf:
+  enabled: true
+bsf:
+  enabled: true
+nrf:
+  enabled: true
+nssf:
+  enabled: true
+  config:
+    nsiList:
+    - uri: ""
+      sst: 1
+      sd: "111111"
+    - uri: ""
+      sst: 1
+      sd: "01b207"
+pcf:
+  enabled: true
+  mongodb:
+    enabled: false
+scp:
+  enabled: true
+  mongodb:
+    enabled: false
+sepp:
+  enabled: false
+udm:
+  enabled: true
+udr:
+  enabled: true
+ 
+# helm install open5gs oci://registry-1.docker.io/gradiantcharts/open5gs --version 2.2.9 --values values.yaml 
\ No newline at end of file

From ef806d1f7d78035273233997bb79ca99fe5338ac Mon Sep 17 00:00:00 2001
From: jponton <jponton@gradiant.org>
Date: Thu, 10 Jul 2025 09:27:29 +0200
Subject: [PATCH 2/3] rm values

---
 values.yaml | 103 ----------------------------------------------------
 1 file changed, 103 deletions(-)
 delete mode 100644 values.yaml

diff --git a/values.yaml b/values.yaml
deleted file mode 100644
index 9a1f36d..0000000
--- a/values.yaml
+++ /dev/null
@@ -1,103 +0,0 @@
-dbURI: "mongodb://{{ .Release.Name }}-mongodb/open5gs"
-
-populate:
-  enabled: true
-  image:
-    registry: docker.io
-    repository: gradiant/open5gs-dbctl
-    tag: 0.10.3
-    pullPolicy: IfNotPresent
-  initCommands:
-    - open5gs-dbctl add_ue_with_slice 999700000053411 02366BDEC178628BC809841190A3F316 4BDB2D50BA9AFEC95D62928620EF6D34 internet 1 1b207
-  # example of initCommands:
-  #  - open5gs-dbctl add 999700000000001 465B5CE8B199B49FAA5F0A2EE238A6BC E8ED289DEBA952E4283B54E88E6183CA
-  #  - open5gs-dbctl add_ue_with_apn 999700000000002 465B5CE8B199B49FAA5F0A2EE238A6BC E8ED289DEBA952E4283B54E88E6183CA internet
-  #  - open5gs-dbctl add_ue_with_slice 999700000000003 465B5CE8B199B49FAA5F0A2EE238A6BC E8ED289DEBA952E4283B54E88E6183CA internet 1 111111
-
-# Common
-mongodb:
-  enabled: true
-  auth:
-    enabled: false
-smf:
-  enabled: true
-  config:
-    pcrf:
-      enabled: false
-upf:
-  enabled: true
-  config:
-    upf:
-      gtpu:
-        dev: net1
-  podAnnotations:
-    k8s.v1.cni.cncf.io/networks: upf-dataplane
-  nodeSelector:
-    kubernetes.io/hostname: solidsnake
-  containerSecurityContext:
-    enabled: true
-    runAsUser: 0
-    runAsGroup: 0
-webui:
-  enabled: true
-
-# 4G
-hss:
-  enabled: false
-mme:
-  enabled: false
-pcrf:
-  enabled: false
-sgwc:
-  enabled: false
-sgwu:
-  enabled: false
-
-# 5G
-amf:
-  enabled: true
-  config:
-    plmnList:
-      - plmn_id:
-          mcc: "999"
-          mnc: "70"
-        s_nssai:
-          - sst: 1
-            sd: "111111"
-          - sst: 1
-            sd: "01b207"
-  services:
-    ngap:
-      type: LoadBalancer
-ausf:
-  enabled: true
-bsf:
-  enabled: true
-nrf:
-  enabled: true
-nssf:
-  enabled: true
-  config:
-    nsiList:
-    - uri: ""
-      sst: 1
-      sd: "111111"
-    - uri: ""
-      sst: 1
-      sd: "01b207"
-pcf:
-  enabled: true
-  mongodb:
-    enabled: false
-scp:
-  enabled: true
-  mongodb:
-    enabled: false
-sepp:
-  enabled: false
-udm:
-  enabled: true
-udr:
-  enabled: true
- 
-# helm install open5gs oci://registry-1.docker.io/gradiantcharts/open5gs --version 2.2.9 --values values.yaml 
\ No newline at end of file

From 6d6882c47a4ed9ee23a8bb1189577af071f73678 Mon Sep 17 00:00:00 2001
From: jponton <jponton@gradiant.org>
Date: Thu, 10 Jul 2025 15:02:44 +0200
Subject: [PATCH 3/3] actios

---
 .github/workflows/lint-helm.yml | 29 ++++++++++
 .github/workflows/publish.yml   | 93 +++++++++++++++++++++++++++++++++
 README.md                       | 14 +++++
 set-version.sh                  | 27 ++++++++++
 4 files changed, 163 insertions(+)
 create mode 100644 .github/workflows/lint-helm.yml
 create mode 100644 .github/workflows/publish.yml
 create mode 100755 set-version.sh

diff --git a/.github/workflows/lint-helm.yml b/.github/workflows/lint-helm.yml
new file mode 100644
index 0000000..98aa394
--- /dev/null
+++ b/.github/workflows/lint-helm.yml
@@ -0,0 +1,29 @@
+name: Lint Helm Chart
+
+on:
+  pull_request:
+    branches:
+      - main
+  push:
+    branches:
+      - main
+
+jobs:
+  lint-helm:
+    runs-on: ubuntu-latest
+    env:
+      CHART_PATH: charts/open5gs-operator
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+
+      - name: Install Helm
+        uses: azure/setup-helm@v4
+        with:
+          version: v3.18.4
+
+      - name: Lint Helm chart
+        run: helm lint $CHART_PATH
+
+      - name: Update Helm dependencies
+        run: helm dep update $CHART_PATH
\ No newline at end of file
diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
new file mode 100644
index 0000000..8077da3
--- /dev/null
+++ b/.github/workflows/publish.yml
@@ -0,0 +1,93 @@
+name: Build and Publish Docker Image & Helm Chart
+
+on:
+  push:
+    branches:
+      - main
+  pull_request:
+    branches:
+      - main
+
+jobs:
+  build-and-publish:
+    runs-on: ubuntu-latest
+    env:
+      IMAGE_NAME: gradiant/open5gs-operator
+      CHART_PATH: charts/open5gs-operator
+      CHART_REPO: oci://registry-1.docker.io/gradiantcharts
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+
+      - name: Set up QEMU
+        uses: docker/setup-qemu-action@v3
+
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v3
+
+      - name: Log in to DockerHub
+        uses: docker/login-action@v3
+        with:
+          username: ${{ secrets.DOCKERHUB_USERNAME }}
+          password: ${{ secrets.DOCKERHUB_TOKEN }}
+
+      - name: Extract version from Makefile
+        id: version
+        run: |
+          VERSION=$(grep -E '^VERSION[[:space:]]*\?=' Makefile | head -1 | sed 's/.*= *//')
+          echo "version=$VERSION" >> $GITHUB_OUTPUT
+
+      - name: Build Docker image
+        uses: docker/build-push-action@v5
+        with:
+          context: .
+          push: false
+          tags: ${{ env.IMAGE_NAME }}:latest,${{ env.IMAGE_NAME }}:${{ steps.version.outputs.version }}
+
+      - name: Push Docker image
+        if: github.event_name == 'push'
+        uses: docker/build-push-action@v5
+        with:
+          context: .
+          push: true
+          tags: ${{ env.IMAGE_NAME }}:latest,${{ env.IMAGE_NAME }}:${{ steps.version.outputs.version }}
+
+      - name: Set up Go
+        uses: actions/setup-go@v5
+        with:
+          go-version-file: 'go.mod'
+
+      - name: Install Helm
+        uses: azure/setup-helm@v4
+        with:
+          version: v3.18.4
+
+      - name: Lint Helm chart
+        run: helm lint $CHART_PATH
+
+      - name: Update Helm dependencies
+        run: helm dep update $CHART_PATH
+
+      - name: Generate Helm chart
+        run: |
+          make helm
+
+      - name: Package Helm chart
+        run: |
+          helm package $CHART_PATH --destination packaged-charts
+
+      - name: Helm registry login (DockerHub)
+        if: github.event_name == 'push'
+        run: |
+          echo ${{ secrets.DOCKERHUB_TOKEN }} | helm registry login registry-1.docker.io -u ${{ secrets.DOCKERHUB_USERNAME }} --password-stdin
+
+      - name: Push Helm chart to DockerHub OCI registry
+        if: github.event_name == 'push'
+        run: |
+          helm push packaged-charts/open5gs-operator-${{ steps.version.outputs.version }}.tgz $CHART_REPO
+
+      - name: Upload Helm chart as artifact
+        uses: actions/upload-artifact@v4
+        with:
+          name: open5gs-operator-chart
+          path: packaged-charts/*.tgz
\ No newline at end of file
diff --git a/README.md b/README.md
index c6d783f..dc8a1b2 100644
--- a/README.md
+++ b/README.md
@@ -115,3 +115,17 @@ A complete demo with UERANSIM is available at [this link](https://gradiant.githu
 10. **UPF Deployment Annotations:** The annotations for the UPF Deployment are managed exclusively through the `upf.deploymentAnnotations` field in the CR. Any annotation not present in this field will be automatically reconciled by the operator (added or removed as needed), so manual changes to annotations will not persist unless reflected in the CR.
 11. **UPF GTP-U Interface:** The GTP-U network interface used by the UPF is set via the `upf.gtpuDev` field in the CR (e.g., `gtpuDev: "eth0"`). By default, the UPF uses the `eth0` interface.
 
+## How to create a new release
+
+To publish a new version of the operator, follow these steps:
+
+1. Make the necessary changes in the code.
+2. Run the version script:
+   ```bash
+   ./set-version.sh <new_version>
+   ```
+   This will update the version in all relevant files (Makefile, kustomization.yaml, Chart.yaml, and values.yaml).
+3. Commit the changes and create the corresponding Pull Request (PR).
+
+This ensures that the published version is consistent with the code and manifests.
+
diff --git a/set-version.sh b/set-version.sh
new file mode 100755
index 0000000..c309523
--- /dev/null
+++ b/set-version.sh
@@ -0,0 +1,27 @@
+#!/bin/bash
+# Script to update the version in Makefile, kustomization.yaml, Chart.yaml, and values.yaml
+# Usage: ./set-version.sh <new_version>
+
+set -e
+
+if [ -z "$1" ]; then
+    echo "Usage: $0 <new_version>"
+    exit 1
+fi
+
+NEW_VERSION="$1"
+
+# Update Makefile
+sed -i "s/^VERSION ?=.*/VERSION ?= $NEW_VERSION/" Makefile
+
+# Update kustomization.yaml
+sed -i "s/newTag: .*/newTag: $NEW_VERSION/" config/manager/kustomization.yaml
+
+# Update Chart.yaml
+sed -i "s/^version: .*/version: $NEW_VERSION/" charts/open5gs-operator/Chart.yaml
+sed -i "s/^appVersion: .*/appVersion: \"$NEW_VERSION\"/" charts/open5gs-operator/Chart.yaml
+
+# Update values.yaml (regardless of indentation)
+sed -i "s/^\s*tag: .*/      tag: $NEW_VERSION/" charts/open5gs-operator/values.yaml
+
+echo "Versions updated to $NEW_VERSION!"
\ No newline at end of file