apiVersion: v1
kind: Pod
metadata:
  name: test-verifier
spec:
  containers:
  - name: cilium-builder
    image: quay.io/cilium/test-verifier:0f6647c542b71e89f310e437570b6d05dd9351bb@sha256:b21ee37daf5b533cc8457060800ac679c5b7bf48cc6f5070584cd59213fabc43
    workingDir: /cilium
    command: ["sleep"]
    args:
      - "1000h"
    securityContext:
      capabilities:
        add:
        - NET_ADMIN
        - SYS_MODULE
      privileged: true
    volumeMounts:
      - mountPath: /sys/fs/bpf
        name: bpf-maps
      - mountPath: /cilium
        name: cilium-src
  volumes:
  - hostPath:
      path: /sys/fs/bpf
      type: DirectoryOrCreate
    name: bpf-maps
  - hostPath:
      path: /home/vagrant/go/src/github.com/cilium/cilium
      type: Directory
    name: cilium-src
  # We need the following toleration overwrite because K8sVerifier runs with
  # Cilium uninstalled, so the network isn't ready.
  tolerations:
  - key: "node.kubernetes.io/not-ready"
    operator: "Exists"
  - key: "node.kubernetes.io/unreachable"
    operator: "Exists"
  hostNetwork: true
  nodeSelector:
    "cilium.io/ci-node": k8s1
