apiVersion: batch/v1
kind: Job
metadata:
  name: update-checker
  namespace: cluster-service
spec:
  template:
    spec:
      tolerations:
      - key: iam.gke.io/gke-metadata-server-enabled
        operator: Equal
        value: "true"
        effect: "NoSchedule"
      nodeSelector:
        iam.gke.io/gke-metadata-server-enabled: "true"