Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Patch fts-cron and renew-fts-cronjob to improve input methods #215

Closed
goseind opened this issue Jan 17, 2023 · 1 comment · Fixed by rucio/helm-charts#131
Closed

Patch fts-cron and renew-fts-cronjob to improve input methods #215

goseind opened this issue Jan 17, 2023 · 1 comment · Fixed by rucio/helm-charts#131
Assignees

Comments

@goseind
Copy link
Member

goseind commented Jan 17, 2023

Motivation

While trying to create a valid x509up certificate out of a grid robot certificate from a service account at CERN to connect Rucio to FTS, I had the following issues with the ft-cron container:

In general, the helm input and handling of different VOs and their respective certificates should be improved.

With this issue, I might also tackle #177

Modification

I suggest changes to the helm chart of the FTS cronjob and script to allow the use of different filenames, as well as a third input option for a password.
Also add additional documentation for the FTS Cron (Container).

Expected results

A improved helm chart and script, so that users do not need to worry about file names and can provide an additional secret for their PEM password.

@goseind goseind changed the title Patch Patch fts-cron and renew-fts-cronjob to improve input methods Jan 17, 2023
goseind added a commit to goseind/containers that referenced this issue Jan 18, 2023
goseind added a commit to goseind/helm-charts that referenced this issue Jan 18, 2023
goseind added a commit to goseind/containers that referenced this issue Jan 19, 2023
goseind added a commit to goseind/containers that referenced this issue Jan 19, 2023
goseind added a commit to goseind/containers that referenced this issue Jan 19, 2023
@goseind
Copy link
Member Author

goseind commented Jan 19, 2023

Minor adjustments to the default script as well as adding the option to provide a grid passphrase. So far no solution found for cert and key filenames to be read from the secret and used as environment variables in the container - the easy solution here is to add this to the README so users are aware of the requirements.

goseind added a commit to goseind/containers that referenced this issue Jan 19, 2023
goseind added a commit to goseind/containers that referenced this issue Jan 20, 2023
goseind added a commit to goseind/containers that referenced this issue Jan 25, 2023
goseind added a commit to goseind/containers that referenced this issue Jan 25, 2023
goseind added a commit to goseind/helm-charts that referenced this issue Jan 25, 2023
goseind added a commit to goseind/helm-charts that referenced this issue Jan 25, 2023
goseind added a commit to goseind/helm-charts that referenced this issue Jan 25, 2023
goseind added a commit to goseind/helm-charts that referenced this issue Jan 30, 2023
goseind added a commit to goseind/helm-charts that referenced this issue Jan 31, 2023
goseind added a commit to goseind/helm-charts that referenced this issue Jan 31, 2023
rcarpa pushed a commit to rucio/helm-charts that referenced this issue Feb 2, 2023
…#131)

* cherry pick changes from original PR

* change longProxy logic, remove quote from secret names and test locally

* cleanup

* cleanup again
mlassnig added a commit that referenced this issue Feb 2, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging a pull request may close this issue.

1 participant