diff --git a/ci/Jenkinsfile.hermes-webui-image b/ci/Jenkinsfile.hermes-webui-image index 8761cd3d..3c05f363 100644 --- a/ci/Jenkinsfile.hermes-webui-image +++ b/ci/Jenkinsfile.hermes-webui-image @@ -28,6 +28,7 @@ spec: operator: NotIn values: - titan-04 + - titan-12 - titan-14 - titan-18 - titan-19 @@ -99,9 +100,11 @@ spec: requests: cpu: 250m memory: 1Gi + ephemeral-storage: 10Gi limits: cpu: "2" memory: 4Gi + ephemeral-storage: 20Gi """ } } diff --git a/testing/tests/test_hermes_webui_release.py b/testing/tests/test_hermes_webui_release.py index 476ef883..bd45ed61 100644 --- a/testing/tests/test_hermes_webui_release.py +++ b/testing/tests/test_hermes_webui_release.py @@ -120,6 +120,12 @@ def test_pipeline_builds_latest_main_containing_reviewed_anchor() -> None: assert spec["enableServiceLinks"] is False containers = {item["name"]: item for item in spec["containers"]} assert "kaniko" in containers + assert containers["kaniko"]["resources"]["requests"]["ephemeral-storage"] == "10Gi" + assert containers["kaniko"]["resources"]["limits"]["ephemeral-storage"] == "20Gi" + excluded_nodes = spec["affinity"]["nodeAffinity"][ + "requiredDuringSchedulingIgnoredDuringExecution" + ]["nodeSelectorTerms"][0]["matchExpressions"][0]["values"] + assert "titan-12" in excluded_nodes assert "docker.sock" not in source and "hostPath" not in source for container in containers.values(): assert container["securityContext"]["allowPrivilegeEscalation"] is False