From 4ed05c334a17b7a1fa2a895c4ca252577cae6050 Mon Sep 17 00:00:00 2001
From: "aleksandr.vodyanov" <aleksandr.vodyanov@avroid.tech>
Date: Fri, 31 May 2024 22:57:23 +0300
Subject: [PATCH] [DO-21] pod template for android build (#26)

Reviewed-on: https://git.avroid.tech/DevOps/jenkins-shared-lib/pulls/26
Co-authored-by: aleksandr.vodyanov <aleksandr.vodyanov@avroid.tech>
Co-committed-by: aleksandr.vodyanov <aleksandr.vodyanov@avroid.tech>
---
 vars/getPodTemplate.groovy | 34 ++++++++++++++++++++++++++++++++++
 1 file changed, 34 insertions(+)

diff --git a/vars/getPodTemplate.groovy b/vars/getPodTemplate.groovy
index 0c9897b..82982c3 100644
--- a/vars/getPodTemplate.groovy
+++ b/vars/getPodTemplate.groovy
@@ -116,6 +116,38 @@ Object containerAuroraTemplate = """
     - name: ${env.JENKINS_K8S_HARBOR_SECRET}
 """
 
+Object containerLinuxTemplate = """
+    apiVersion: v1
+    kind: Pod
+    metadata:
+      annotations:
+        container.apparmor.security.beta.kubernetes.io/linux: unconfined
+        seccomp.security.alpha.kubernetes.io/linux: unconfined
+    spec:
+      containers:
+      - name: linux
+        securityContext:
+          runAsUser: 1000
+          runAsGroup: 1000
+          capabilities:
+            add:
+            - SYS_ADMIN
+        image: ${env.JENKINS_DOCKER_REGISTRY}/container/container-build-linux:1.2
+        command:
+        - sleep
+        args:
+        - 99d
+        resources:
+          limits:
+            cpu: 30
+            memory: 256Gi
+          requests:
+            cpu: 30
+            memory: 64Gi
+      imagePullSecrets:
+      - name: ${env.JENKINS_K8S_HARBOR_SECRET}
+"""
+
 Object sonarCubeScannerTemplate = """
   apiVersion: v1
   kind: Pod
@@ -175,6 +207,8 @@ Object tavroLinuxTemplate = """
             return tavroAuroraV5Template
         case 'containerAurora':
             return containerAuroraTemplate
+        case 'containerLinux':
+            return containerLinuxTemplate
         case "sonarCubeScanner":
             return sonarCubeScannerTemplate
         case 'tavroLinux':