rules:
  - apiGroups: [""]
    resources: ["pods", "pods/log", "pods/status"]
    verbs: ["get", "watch", "list"]
  - apiGroups: ["batch"]
    resources: ["jobs"]
    verbs: [ "get", "list", "watch", "create", "update", "patch", "delete" ]

apiVersion: batch/v1
kind: Job
metadata:
  name: FLOWNAME-job
  labels:
    <http://app.kubernetes.io/name|app.kubernetes.io/name>: FLOWNAME
spec:
  template:
    spec:
      serviceAccountName: prefect-orion-agent
      restartPolicy: Never
      completions: 1
      parallelism: 1
      affinity:
        nodeAffinity:
          requiredDuringSchedulingIgnoredDuringExecution:
            nodeSelectorTerms:
            - matchExpressions:
              - key: "<http://kubernetes.io/arch|kubernetes.io/arch>"
                operator: In
                values: ["amd64"]
      containers:
        - name: prefect-job
          imagePullPolicy: IfNotPresent
          env:
            - name: SECRET_VALUE
              valueFrom:
                secretKeyRef:
                  name: prefect-orion-agent
                  key: SECRET_VALUE
            - name: CONFIGMAP_VALUE
              valueFrom:
                configMapKeyRef:
                  name: prefect-orion-agent
                  key: CONFIGMAP_VALUE