forked from rucio/k8s-tutorial
-
Notifications
You must be signed in to change notification settings - Fork 0
/
client.yaml
58 lines (56 loc) · 1.66 KB
/
client.yaml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
---
apiVersion: v1
kind: Pod
metadata:
name: client
labels:
app: client
spec:
containers:
- name: client
image: rucio/rucio-clients:latest
volumeMounts:
- name: user-cert
mountPath: /tmp/usercert.pem
subPath: tls.cert
- name: user-cert
mountPath: /tmp/userkey.pem
subPath: tls.key
- name: ca-cert
mountPath: /etc/grid-security/certificates/5fca1cb1.0
subPath: tls.cert
command: ["/bin/bash"]
args: ["-c", "mkdir -p /opt/rucio/etc; cp /tmp/usercert.pem /opt/rucio/etc/usercert.pem; cp /tmp/userkey.pem /opt/rucio/etc/userkey.pem; chmod 400 /opt/rucio/etc/userkey.pem; echo ready; while true; do sleep 60; done"]
env:
- name: RUCIO_CFG_CLIENT_RUCIO_HOST
value: http://server-rucio-server
- name: RUCIO_CFG_CLIENT_AUTH_HOST
value: http://server-rucio-server
- name: RUCIO_CFG_CLIENT_AUTH_TYPE
value: userpass
- name: RUCIO_CFG_CLIENT_USERNAME
value: tutorial
- name: RUCIO_CFG_CLIENT_PASSWORD
value: secret1R
- name: RUCIO_CFG_CLIENT_ACCOUNT
value: root
- name: RUCIO_CFG_CLIENT_CERT
value: /opt/rucio/etc/usercert.pem
- name: RUCIO_CFG_CLIENT_CA_CERT
value: /etc/grid-security/certificates/5fca1cb1.0
- name: RUCIO_CFG_CLIENT_KEY
value: /opt/rucio/etc/userkey.pem
- name: RUCIO_CFG_CLIENT_X509_PROXY
value: $X509_USER_PROXY
- name: X509_USER_CERT
value: /opt/rucio/etc/usercert.pem
- name: X509_USER_KEY
value: /opt/rucio/etc/userkey.pem
volumes:
- name: user-cert
secret:
secretName: ruciouser-cert
- name: ca-cert
secret:
secretName: ca-cert
defaultMode: 0644