From 97d2ba87a2d33130558c0ac67e5804dca9641202 Mon Sep 17 00:00:00 2001
From: jgrusewski <jgrusewski@localhost>
Date: Tue, 31 Mar 2026 17:22:41 +0200
Subject: [PATCH] =?UTF-8?q?fix:=20Databento=20download=20job=20=E2=80=94?=
 =?UTF-8?q?=20HOME=3D/tmp=20for=20pip,=20network=20policy=20label?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Set HOME=/tmp to fix pip cache ownership, --no-cache-dir for clean install.
Label compile-and-train matches network policy for HTTPS egress.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
---
 infra/k8s/jobs/databento-download.yaml | 10 ++++++----
 1 file changed, 6 insertions(+), 4 deletions(-)

diff --git a/infra/k8s/jobs/databento-download.yaml b/infra/k8s/jobs/databento-download.yaml
index 33caba367..c26a180aa 100644
--- a/infra/k8s/jobs/databento-download.yaml
+++ b/infra/k8s/jobs/databento-download.yaml
@@ -24,6 +24,7 @@ spec:
       labels:
         app.kubernetes.io/name: databento-download
         app.kubernetes.io/part-of: foxhunt
+        app.kubernetes.io/component: compile-and-train
     spec:
       restartPolicy: OnFailure
       securityContext:
@@ -44,18 +45,19 @@ spec:
                   key: api-key
           resources:
             requests:
+              cpu: 500m
+              memory: 1Gi
+            limits:
               cpu: "2"
               memory: 4Gi
-            limits:
-              cpu: "4"
-              memory: 8Gi
           volumeMounts:
             - name: training-data
               mountPath: /data
           args:
             - |
               set -e
-              pip install databento --quiet
+              export HOME=/tmp
+              pip install --no-cache-dir --break-system-packages databento
 
               python3 << 'PYEOF'
               import databento as db