-
Notifications
You must be signed in to change notification settings - Fork 549
Add Job ssh for kube-runtime. Create ssh key secret in cluster-config #3153
Conversation
…uration Add Job ssh for kube-runtime. Create ssh key secret in cluster-configuration
…uration Add Job ssh for kube-runtime. Create ssh key secret in cluster-configuration
…ft/pai into diawang/pure-k8s-job-ssh
…uration Add Job ssh for kube-runtime. Create ssh key secret in cluster-configuration
…ft/pai into diawang/pure-k8s-job-ssh
touch /root/.ssh/authorized_keys | ||
chmod 600 /root/.ssh/authorized_keys | ||
|
||
mkdir -p /var/run/sshd |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
do not need?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Better have this in case the files are not created.
prepare_ssh | ||
prepare_job_ssh | ||
prepare_user_ssh | ||
start_ssh | ||
fi | ||
else | ||
echo "no sshd binary found" >&2 |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
install openssh server for user if there's no sshd in image?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Ok
{ | ||
name: 'job-ssh-secret-volume', | ||
readOnly: true, | ||
mountPath: '/etc/ssh-secret', |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
maybe mount to /usr/local/pai/secrets
?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Changed mountPath to /usr/local/pai/ssh-secret. Although I think user should not use this key elsewhere.
Add Job ssh for kube-runtime.
Create ssh key secret in cluster-config