apiVersion: batch/v1
kind: Job
metadata:
  name: @@JOB_NAME@@
  namespace: nuthatch-testbed
spec:
  activeDeadlineSeconds: 120
  backoffLimit: 0
  ttlSecondsAfterFinished: 300
  template:
    spec:
      automountServiceAccountToken: false
      enableServiceLinks: false
      restartPolicy: Never
      containers:
        - name: runtime-audit-probe
          image: @@TEST_IMAGE@@
          imagePullPolicy: Never
          command: [nuthatch-runtime-audit-probe]
          envFrom:
            - configMapRef: {name: @@PROFILE_NAME@@}
          env:
            - {name: NUTHATCH_JWT_SECRET, value: synthetic-runtime-session-jwt-secret}
            - name: NUTHATCH_OIDC_CLIENT_SECRET
              valueFrom:
                secretKeyRef:
                  name: nuthatch-@@LANE@@
                  key: NUTHATCH_OIDC_CLIENT_SECRET
          volumeMounts:
            - {name: runtime-log, mountPath: /run/nuthatch-runtime, readOnly: true}
          resources:
            requests: {cpu: 25m, memory: 32Mi}
            limits: {cpu: "1", memory: 128Mi}
      volumes:
        - name: runtime-log
          configMap:
            name: @@LOG_CONFIG_MAP@@