```
apiVersion: v1
kind: Pod
metadata:
  name: loader-cvs-manual
  namespace: swh
spec:
  affinity:
    nodeAffinity:
      requiredDuringSchedulingIgnoredDuringExecution:
        nodeSelectorTerms:
        - matchExpressions:
          - key: swh/loader
            operator: In
            values:
            - "true"
  containers:
  - command:
    - sleep
    - 30d
    env:
    - name: STATSD_HOST
      value: prometheus-statsd-exporter
    - name: STATSD_PORT
      value: "9125"
    - name: MAX_TASKS_PER_CHILD
      value: "10"
    - name: LOGLEVEL
      value: INFO
    - name: SWH_CONFIG_FILENAME
      value: /etc/swh/config.yml
    - name: SWH_SENTRY_ENVIRONMENT
      value: staging
    - name: SWH_MAIN_PACKAGE
      value: swh.loader.cvs
    - name: SWH_SENTRY_DSN
      valueFrom:
        secretKeyRef:
          key: loader-cvs-sentry-dsn
          name: common-secrets
          optional: false
    image: softwareheritage/loader_cvs:20220926.1
    imagePullPolicy: Always
    lifecycle:
      preStop:
        exec:
          command:
          - /pre-stop.sh
    name: loaders
    volumeMounts:
    - mountPath: /etc/swh
      name: configuration
    - mountPath: /tmp
      name: localstorage
  initContainers:
  - command:
    - /entrypoint.sh
    env:
    - name: AMQP_USERNAME
      valueFrom:
        secretKeyRef:
          key: rabbitmq-amqp-username
          name: common-secrets
          optional: false
    - name: AMQP_PASSWORD
      valueFrom:
        secretKeyRef:
          key: rabbitmq-amqp-password
          name: common-secrets
          optional: false
    image: debian:bullseye
    imagePullPolicy: Always
    name: prepare-configuration
    volumeMounts:
    - mountPath: /entrypoint.sh
      name: configuration-template
      readOnly: true
      subPath: init-container-entrypoint.sh
    - mountPath: /etc/swh
      name: configuration
    - mountPath: /etc/swh/configuration-template
      name: configuration-template
    - mountPath: /etc/credentials/metadata-fetcher
      name: metadata-fetcher-credentials
      readOnly: true
  restartPolicy: Always
  volumes:
  - emptyDir: {}
    name: localstorage
  - emptyDir: {}
    name: configuration
  - configMap:
      defaultMode: 511
      items:
      - key: config.yml.template
        path: config.yml.template
      - key: init-container-entrypoint.sh
        path: init-container-entrypoint.sh
      name: loader-cvs-template
    name: configuration-template
  - name: metadata-fetcher-credentials
    secret:
      defaultMode: 420
      optional: true
      secretName: metadata-fetcher-credentials
```