ci(hermes-webui): reserve image build storage

ci/Jenkinsfile.hermes-webui-image

@@ -28,6 +28,7 @@ spec:
                 operator: NotIn
                 values:
                   - titan-04
+                  - titan-12
                   - titan-14
                   - titan-18
                   - titan-19
@@ -99,9 +100,11 @@ spec:
         requests:
           cpu: 250m
           memory: 1Gi
+          ephemeral-storage: 10Gi
         limits:
           cpu: "2"
           memory: 4Gi
+          ephemeral-storage: 20Gi
 """
     }
   }

testing/tests/test_hermes_webui_release.py

@@ -120,6 +120,12 @@ def test_pipeline_builds_latest_main_containing_reviewed_anchor() -> None:
     assert spec["enableServiceLinks"] is False
     containers = {item["name"]: item for item in spec["containers"]}
     assert "kaniko" in containers
+    assert containers["kaniko"]["resources"]["requests"]["ephemeral-storage"] == "10Gi"
+    assert containers["kaniko"]["resources"]["limits"]["ephemeral-storage"] == "20Gi"
+    excluded_nodes = spec["affinity"]["nodeAffinity"][
+        "requiredDuringSchedulingIgnoredDuringExecution"
+    ]["nodeSelectorTerms"][0]["matchExpressions"][0]["values"]
+    assert "titan-12" in excluded_nodes
     assert "docker.sock" not in source and "hostPath" not in source
     for container in containers.values():
         assert container["securityContext"]["allowPrivilegeEscalation"] is False