ms2k
15eb0038d2
Use descriptive test and executable names so implementation surfaces do not depend on journal organization. Consolidate the unreleased migration history into the authoritative initial schema because no deployed database requires an upgrade path.
33 lines
1.3 KiB
YAML
33 lines
1.3 KiB
YAML
apiVersion: batch/v1
|
|
kind: Job
|
|
metadata:
|
|
name: @@JOB_NAME@@
|
|
namespace: nuthatch-testbed
|
|
spec:
|
|
activeDeadlineSeconds: 300
|
|
backoffLimit: 0
|
|
template:
|
|
spec:
|
|
automountServiceAccountToken: false
|
|
enableServiceLinks: false
|
|
restartPolicy: Never
|
|
containers:
|
|
- name: protocol-conformance
|
|
image: @@TEST_IMAGE@@
|
|
imagePullPolicy: Never
|
|
command: [nuthatch-protocol-conformance]
|
|
args: ["@@MODE@@"]
|
|
envFrom:
|
|
- configMapRef: {name: @@PROFILE_NAME@@}
|
|
env:
|
|
- {name: NUTHATCH_OBJECT_REQUEST_TIMEOUT_SEC, value: "3"}
|
|
- {name: NUTHATCH_JWT_SECRET, value: synthetic-protocol-session-jwt-secret}
|
|
- {name: NUTHATCH_PUBLIC_BASE_URL, value: "https://protocol.invalid"}
|
|
- {name: NUTHATCH_OIDC_ISSUER, value: "https://issuer.invalid"}
|
|
- {name: NUTHATCH_OIDC_CLIENT_ID, value: protocol-conformance}
|
|
- {name: NUTHATCH_OIDC_ADDITIONAL_AUDIENCES, value: ""}
|
|
- {name: NUTHATCH_OIDC_CLIENT_SECRET, value: synthetic-protocol-oidc-client-secret}
|
|
- {name: NUTHATCH_OIDC_REDIRECT_URI, value: "https://protocol.invalid/oidc/callback"}
|
|
resources:
|
|
requests: {cpu: 100m, memory: 96Mi}
|
|
limits: {cpu: "2", memory: 256Mi}
|