From b98a7cbe9f33635a814d9b31655882b97ac272d5 Mon Sep 17 00:00:00 2001
From: jenkins <brad@bstein.dev>
Date: Sun, 23 Aug 2026 16:54:10 -0300
Subject: [PATCH] ci(hermes-webui): reserve image build storage

---
 ci/Jenkinsfile.hermes-webui-image          | 3 +++
 testing/tests/test_hermes_webui_release.py | 6 ++++++
 2 files changed, 9 insertions(+)

diff --git a/ci/Jenkinsfile.hermes-webui-image b/ci/Jenkinsfile.hermes-webui-image
index 8761cd3d..3c05f363 100644
--- a/ci/Jenkinsfile.hermes-webui-image
+++ b/ci/Jenkinsfile.hermes-webui-image
@@ -28,6 +28,7 @@ spec:
                 operator: NotIn
                 values:
                   - titan-04
+                  - titan-12
                   - titan-14
                   - titan-18
                   - titan-19
@@ -99,9 +100,11 @@ spec:
         requests:
           cpu: 250m
           memory: 1Gi
+          ephemeral-storage: 10Gi
         limits:
           cpu: "2"
           memory: 4Gi
+          ephemeral-storage: 20Gi
 """
     }
   }
diff --git a/testing/tests/test_hermes_webui_release.py b/testing/tests/test_hermes_webui_release.py
index 476ef883..bd45ed61 100644
--- a/testing/tests/test_hermes_webui_release.py
+++ b/testing/tests/test_hermes_webui_release.py
@@ -120,6 +120,12 @@ def test_pipeline_builds_latest_main_containing_reviewed_anchor() -> None:
     assert spec["enableServiceLinks"] is False
     containers = {item["name"]: item for item in spec["containers"]}
     assert "kaniko" in containers
+    assert containers["kaniko"]["resources"]["requests"]["ephemeral-storage"] == "10Gi"
+    assert containers["kaniko"]["resources"]["limits"]["ephemeral-storage"] == "20Gi"
+    excluded_nodes = spec["affinity"]["nodeAffinity"][
+        "requiredDuringSchedulingIgnoredDuringExecution"
+    ]["nodeSelectorTerms"][0]["matchExpressions"][0]["values"]
+    assert "titan-12" in excluded_nodes
     assert "docker.sock" not in source and "hostPath" not in source
     for container in containers.values():
         assert container["securityContext"]["allowPrivilegeEscalation"] is False