Skip to content
This repository has been archived by the owner on Jun 6, 2024. It is now read-only.

Add Job ssh for kube-runtime. Create ssh key secret in cluster-config #3153

Merged
merged 11 commits into from
Jul 11, 2019

Conversation

wangdian
Copy link
Member

Add Job ssh for kube-runtime.
Create ssh key secret in cluster-config

@wangdian wangdian requested a review from abuccts July 10, 2019 11:41
@coveralls
Copy link

coveralls commented Jul 10, 2019

Coverage Status

Coverage increased (+0.01%) to 50.649% when pulling 3008b86 on diawang/pure-k8s-job-ssh into 8eb5d8c on feature/pure-k8s.

touch /root/.ssh/authorized_keys
chmod 600 /root/.ssh/authorized_keys

mkdir -p /var/run/sshd
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

do not need?

Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Better have this in case the files are not created.

prepare_ssh
prepare_job_ssh
prepare_user_ssh
start_ssh
fi
else
echo "no sshd binary found" >&2
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

install openssh server for user if there's no sshd in image?

Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Ok

{
name: 'job-ssh-secret-volume',
readOnly: true,
mountPath: '/etc/ssh-secret',
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

maybe mount to /usr/local/pai/secrets?

Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Changed mountPath to /usr/local/pai/ssh-secret. Although I think user should not use this key elsewhere.

@wangdian wangdian merged commit f5ed5e5 into feature/pure-k8s Jul 11, 2019
@wangdian wangdian deleted the diawang/pure-k8s-job-ssh branch November 28, 2019 08:39
@hzy46 hzy46 mentioned this pull request Apr 27, 2020
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants