extract k7s job templates

Signed-off-by: Javan Lacerda <javanlacerda@google.com>

Author: javanlacerda

Pipfile

@@ -18,6 +18,7 @@ google-cloud-secret-manager = "==2.17.0"
 google-cloud-logging = "==3.6.0"
 google-cloud-monitoring = "==2.15.1"
 google-cloud-datastore = "==2.16.1"
+Jinja2 = "==3.1.2"
 oauth2client = "==4.1.3"
 requests = "==2.21.0"
 PyYAML = "==6.0"

Pipfile.lock

@@ -27,6 +27,7 @@ google-crc32c = "==1.5.0"
 grpcio = "==1.62.2"
 httplib2 = "==0.19.0"
 jira = "==2.0.0"
+Jinja2 = "==3.1.4"
 kubernetes = "==34.1.0"
 mozprocess = "==1.3.1"
 oauth2client = "==4.1.3"
@@ -50,8 +51,7 @@ charset-normalizer = "==3.3.2"
 firebase-admin = "==6.2.0"
 Flask = "==2.2.2"
 itsdangerous = "==2.0.1"
-Jinja2 = "==3.1.4"
-PyJWT = "==2.7.0"
+pyjwt = "==2.7.0"
 requests-toolbelt = "==0.9.1"
 werkzeug = "==2.2.2"
 parameterized = "==0.9.0"

src/Pipfile

@@ -0,0 +1,60 @@
+# Copyright 2026 Google LLC
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#      http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+apiVersion: batch/v1
+kind: Job
+metadata:
+  name: "{{job_name}}"
+spec:
+  activeDeadlineSeconds: {{active_deadline_seconds}}
+  template:
+    spec:
+      serviceAccountName: "{{service_account_name}}"
+      containers:
+      - name: "{{job_name}}"
+        image: "{{docker_image}}"
+        imagePullPolicy: IfNotPresent
+        env:
+        - name: HOST_UID
+          value: '1337'
+        - name: CLUSTERFUZZ_RELEASE
+          value: "{{clusterfuzz_release}}"
+        - name: UNTRUSTED_WORKER
+          value: 'False'
+        - name: UWORKER
+          value: 'True'
+        - name: USE_GCLOUD_STORAGE_RSYNC
+          value: '1'
+        - name: UWORKER_INPUT_DOWNLOAD_URL
+          value: "{{input_url}}"
+        - name: IS_K8S_ENV
+          value: 'true'
+        - name: DISABLE_MOUNTS
+          value: 'true'
+        - name: UPDATE_WEB_TESTS
+          value: 'False'
+        securityContext:
+          privileged: true
+          capabilities:
+            add:
+            - ALL
+        volumeMounts:
+        - mountPath: /dev/shm
+          name: dshm
+      volumes:
+      - name: dshm
+        emptyDir:
+          medium: Memory
+          sizeLimit: 1.9Gi
+      restartPolicy: Never
+  backoffLimit: 0

src/Pipfile.lock

@@ -0,0 +1,78 @@
+# Copyright 2026 Google LLC
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#      http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+apiVersion: batch/v1
+kind: Job
+metadata:
+  name: "{{job_name}}"
+spec:
+  activeDeadlineSeconds: {{active_deadline_seconds}}
+  template:
+    metadata:
+      labels:
+        app.kubernetes.io/name: clusterfuzz-kata-job
+    spec:
+      runtimeClassName: kata
+      serviceAccountName: "{{service_account_name}}"
+      dnsPolicy: ClusterFirstWithHostNet
+      containers:
+      - name: "{{job_name}}"
+        image: "{{docker_image}}"
+        imagePullPolicy: IfNotPresent
+        lifecycle:
+          postStart:
+            exec:
+              command:
+              - /bin/sh
+              - -c
+              - mkdir -p /tmp/.X11-unix && chmod 1777 /tmp/.X11-unix
+        securityContext:
+          privileged: true
+          capabilities:
+            add:
+            - ALL
+        resources:
+          requests:
+            cpu: '2'
+            memory: 3.75Gi
+          limits:
+            cpu: '2'
+            memory: 3.75Gi
+        env:
+        - name: HOST_UID
+          value: '1337'
+        - name: CLUSTERFUZZ_RELEASE
+          value: "{{clusterfuzz_release}}"
+        - name: UNTRUSTED_WORKER
+          value: 'False'
+        - name: UWORKER
+          value: 'True'
+        - name: USE_GCLOUD_STORAGE_RSYNC
+          value: '1'
+        - name: UWORKER_INPUT_DOWNLOAD_URL
+          value: "{{input_url}}"
+        - name: IS_K8S_ENV
+          value: 'true'
+        - name: DISABLE_MOUNTS
+          value: 'true'
+        - name: UPDATE_WEB_TESTS
+          value: 'False'
+      restartPolicy: Never
+      volumes:
+      - name: dshm
+        emptyDir:
+          medium: Memory
+          sizeLimit: 1.9Gi
+      nodeSelector:
+        cloud.google.com/gke-nodepool: kata-enabled-pool
+  backoffLimit: 0