apiVersion: "v1"
kind: "Pod"
metadata:
  labels:
    jenkins: "agent"
    job: "helmfile"
spec:
  tolerations:
    - key: "os"
      operator: "Equal"
      value: "linux"
      effect: "NoSchedule"
    - key: "profile"
      operator: "Equal"
      value: "highmem"
      effect: "NoSchedule"
  affinity:
    nodeAffinity:
      requiredDuringSchedulingIgnoredDuringExecution:
        nodeSelectorTerms:
          - matchExpressions:
              - key: kubernetes.io/os
                operator: In
                values:
                  - linux
      preferredDuringSchedulingIgnoredDuringExecution:
        - weight: 1
          preference:
            matchExpressions:
              - key: agentpool
                operator: In
                values:
                  - highmemlinux
  containers:
    - args:
        - "99d"
      command:
        - "sleep"
      env:
        - name: "HOME"
          value: "/home/helm"
      image: "jenkinsciinfra/helmfile:1.4.20"
      imagePullPolicy: "IfNotPresent"
      name: "helmfile"
      resources:
        limits:
          memory: "1512Mi"
          cpu: "400m"
        requests:
          memory: "1512Mi"
          cpu: "400m"
      securityContext:
        privileged: false
      tty: true
    - args:
        - "99d"
      command:
        - "sleep"
      env:
        - name: "HOME"
          value: "/home/helm"
      image: "ghcr.io/updatecli/updatecli:v0.13.1"
      imagePullPolicy: "Always"
      name: "updatecli"
      resources:
        limits:
          memory: "512Mi"
          cpu: "400m"
        requests:
          memory: "512Mi"
          cpu: "400m"
      securityContext:
        privileged: false
      tty: true
    - args:
        - "99d"
      command:
        - "sleep"
      env:
        - name: "HOME"
          value: "/home/helm"
      image: "cytopia/yamllint:1.22"
      imagePullPolicy: "Always"
      name: "yamllint"
      resources:
        limits:
          memory: "512Mi"
          cpu: "400m"
        requests:
          memory: "512Mi"
          cpu: "400m"
      securityContext:
        privileged: false
      tty: true
  restartPolicy: "Never"
  serviceAccount: "cluster-admin"
