spec:
  nodeSelector:
    kubernetes.io/arch: arm64
  terminationGracePeriodSeconds: 0
  containers:
  - name: build
    image: git.pyrocufflink.net/containerimages/build/basementhud
    command:
    - sleep
    - infinity
    securityContext:
      readOnlyRootFilesystem: true
      privileged: true
    volumeMounts:
    - name: tmp
      mountPath: /tmp
  - name: publish
    image: git.pyrocufflink.net/containerimages/build/basementhud
    command:
    - sleep
    - infinity
    securityContext:
      readOnlyRootFilesystem: true
      runAsUser: 1000
    volumeMounts:
    - name: tmp
      mountPath: /tmp
  volumes:
  - name: tmp
    emptyDir:
      medium: Memory