ci(hermes-images): target spacious ARM builders
This commit is contained in:
parent
21443895ff
commit
6a55627866
@ -25,15 +25,8 @@ spec:
|
|||||||
nodeSelectorTerms:
|
nodeSelectorTerms:
|
||||||
- matchExpressions:
|
- matchExpressions:
|
||||||
- key: kubernetes.io/hostname
|
- key: kubernetes.io/hostname
|
||||||
operator: NotIn
|
|
||||||
values: [titan-04, titan-12, titan-14, titan-18, titan-19, titan-22, titan-24]
|
|
||||||
preferredDuringSchedulingIgnoredDuringExecution:
|
|
||||||
- weight: 100
|
|
||||||
preference:
|
|
||||||
matchExpressions:
|
|
||||||
- key: hardware
|
|
||||||
operator: In
|
operator: In
|
||||||
values: [rpi5]
|
values: [titan-15, titan-17]
|
||||||
imagePullSecrets:
|
imagePullSecrets:
|
||||||
- name: harbor-bstein-robot
|
- name: harbor-bstein-robot
|
||||||
containers:
|
containers:
|
||||||
|
|||||||
@ -25,23 +25,10 @@ spec:
|
|||||||
nodeSelectorTerms:
|
nodeSelectorTerms:
|
||||||
- matchExpressions:
|
- matchExpressions:
|
||||||
- key: kubernetes.io/hostname
|
- key: kubernetes.io/hostname
|
||||||
operator: NotIn
|
|
||||||
values:
|
|
||||||
- titan-04
|
|
||||||
- titan-12
|
|
||||||
- titan-14
|
|
||||||
- titan-18
|
|
||||||
- titan-19
|
|
||||||
- titan-22
|
|
||||||
- titan-24
|
|
||||||
preferredDuringSchedulingIgnoredDuringExecution:
|
|
||||||
- weight: 100
|
|
||||||
preference:
|
|
||||||
matchExpressions:
|
|
||||||
- key: hardware
|
|
||||||
operator: In
|
operator: In
|
||||||
values:
|
values:
|
||||||
- rpi5
|
- titan-15
|
||||||
|
- titan-17
|
||||||
imagePullSecrets:
|
imagePullSecrets:
|
||||||
- name: harbor-bstein-robot
|
- name: harbor-bstein-robot
|
||||||
containers:
|
containers:
|
||||||
|
|||||||
@ -21,7 +21,7 @@ def test_voice_pipeline_binds_component_source_digest_and_release() -> None:
|
|||||||
assert "PUBLISH HERMES TTS" in pipeline
|
assert "PUBLISH HERMES TTS" in pipeline
|
||||||
assert "archiveArtifacts(" in pipeline
|
assert "archiveArtifacts(" in pipeline
|
||||||
assert '"SETFCAP"' in pipeline
|
assert '"SETFCAP"' in pipeline
|
||||||
assert "titan-12" in pipeline
|
assert "values: [titan-15, titan-17]" in pipeline
|
||||||
assert "ephemeral-storage: 10Gi" in pipeline
|
assert "ephemeral-storage: 10Gi" in pipeline
|
||||||
assert "ephemeral-storage: 20Gi" in pipeline
|
assert "ephemeral-storage: 20Gi" in pipeline
|
||||||
assert "privileged: true" not in pipeline
|
assert "privileged: true" not in pipeline
|
||||||
|
|||||||
@ -122,10 +122,10 @@ def test_pipeline_builds_latest_main_containing_reviewed_anchor() -> None:
|
|||||||
assert "kaniko" in containers
|
assert "kaniko" in containers
|
||||||
assert containers["kaniko"]["resources"]["requests"]["ephemeral-storage"] == "10Gi"
|
assert containers["kaniko"]["resources"]["requests"]["ephemeral-storage"] == "10Gi"
|
||||||
assert containers["kaniko"]["resources"]["limits"]["ephemeral-storage"] == "20Gi"
|
assert containers["kaniko"]["resources"]["limits"]["ephemeral-storage"] == "20Gi"
|
||||||
excluded_nodes = spec["affinity"]["nodeAffinity"][
|
build_nodes = spec["affinity"]["nodeAffinity"][
|
||||||
"requiredDuringSchedulingIgnoredDuringExecution"
|
"requiredDuringSchedulingIgnoredDuringExecution"
|
||||||
]["nodeSelectorTerms"][0]["matchExpressions"][0]["values"]
|
]["nodeSelectorTerms"][0]["matchExpressions"][0]["values"]
|
||||||
assert "titan-12" in excluded_nodes
|
assert build_nodes == ["titan-15", "titan-17"]
|
||||||
assert "docker.sock" not in source and "hostPath" not in source
|
assert "docker.sock" not in source and "hostPath" not in source
|
||||||
for container in containers.values():
|
for container in containers.values():
|
||||||
assert container["securityContext"]["allowPrivilegeEscalation"] is False
|
assert container["securityContext"]["allowPrivilegeEscalation"] is False
|
||||||
|
|||||||
Loading…
x
Reference in New Issue
Block a user