Split kind tests into component-owned probes

tests/kind/recovery-log-job.yaml.in

@@ -0,0 +1,41 @@
+apiVersion: batch/v1
+kind: Job
+metadata:
+  name: @@JOB_NAME@@
+  namespace: nuthatch-testbed
+spec:
+  activeDeadlineSeconds: 120
+  backoffLimit: 0
+  ttlSecondsAfterFinished: 300
+  template:
+    spec:
+      automountServiceAccountToken: false
+      enableServiceLinks: false
+      restartPolicy: Never
+      containers:
+        - name: recovery-log-probe
+          image: @@TEST_IMAGE@@
+          imagePullPolicy: Never
+          command: [nuthatch-recovery-probe]
+          args: [log-exhausted]
+          envFrom:
+            - configMapRef: {name: @@PROFILE_NAME@@}
+          env:
+            - {name: NUTHATCH_RECOVERY_GRACE_SEC, value: "1"}
+            - {name: NUTHATCH_OBJECT_REQUEST_TIMEOUT_SEC, value: "2"}
+            - {name: NUTHATCH_JWT_SECRET, value: synthetic-recovery-session-jwt-secret}
+            - {name: NUTHATCH_PUBLIC_BASE_URL, value: "https://recovery.invalid"}
+            - {name: NUTHATCH_OIDC_ISSUER, value: "https://issuer.invalid"}
+            - {name: NUTHATCH_OIDC_CLIENT_ID, value: recovery}
+            - {name: NUTHATCH_OIDC_ADDITIONAL_AUDIENCES, value: ""}
+            - {name: NUTHATCH_OIDC_CLIENT_SECRET, value: synthetic-recovery-oidc-client-secret}
+            - {name: NUTHATCH_OIDC_REDIRECT_URI, value: "https://recovery.invalid/oidc/callback"}
+          volumeMounts:
+            - {name: recovery-log, mountPath: /run/nuthatch-recovery, readOnly: true}
+          resources:
+            requests: {cpu: 50m, memory: 64Mi}
+            limits: {cpu: "1", memory: 256Mi}
+      volumes:
+        - name: recovery-log
+          configMap:
+            name: @@LOG_CONFIG_MAP@@