apiVersion: batch/v1
kind: Job
metadata:
  name: dever-development-check
spec:
  ttlSecondsAfterFinished: 86400
  activeDeadlineSeconds: 7200
  backoffLimit: 0
  template:
    metadata:
      labels:
        app: dever-development-check
    spec:
      automountServiceAccountToken: false
      restartPolicy: Never
      securityContext:
        runAsNonRoot: true
        runAsUser: 1000
        runAsGroup: 1000
        fsGroup: 1000
      containers:
        - name: check
          image: docker.io/library/python@sha256:aaf08c5490d52cd92bc27142a5215b1e47355a5eaf9adfad2a0fbc022d0b5490
          command:
            - /bin/sh
            - -ec
            - 'while [ ! -f /work/start ]; do sleep 1; done; exec /bin/sh /work/check.sh'
          env:
            - name: CARGO_BUILD_JOBS
              value: "4"
          resources:
            requests:
              cpu: 250m
              memory: 256Mi
              ephemeral-storage: 4Gi
            limits:
              cpu: "4"
              memory: 8Gi
              ephemeral-storage: 12Gi
          securityContext:
            allowPrivilegeEscalation: false
            capabilities:
              drop: [ALL]
          volumeMounts:
            - name: work
              mountPath: /work
      volumes:
        - name: work
          emptyDir: {}
---
apiVersion: networking.k8s.io/v1
kind: NetworkPolicy
metadata:
  name: dever-development-check
spec:
  podSelector:
    matchLabels:
      app: dever-development-check
  policyTypes: [Egress]
  egress: []