add gplazma config

dCache · Aug 17, 2023 · 5ce9cf8 · 5ce9cf8
1 parent 644ec67
commit 5ce9cf8
Show file tree

Hide file tree

Showing 2 changed files with 63 additions and 0 deletions.
diff --git a/templates/configmap.yaml b/templates/configmap.yaml
@@ -120,3 +120,26 @@ data:
 
   export: |-
     /data *(rw,no_root_squash)
+
+  gplazma.conf: |-
+    auth    optional    x509
+    auth    optional    voms
+    auth    sufficient  htpasswd
+    map     optional    vorolemap
+    map     optional    gridmap
+    map     requisite   authzdb
+    session requisite   roles
+    session requisite   authzdb
+
+  grid-mapfile: |-
+    "/C=DE/ST=Hamburg/O=dCache.ORG/CN=Kermit the frog" kermit
+
+  grid-vorolemap: |-
+    "*" "/desy" desyuser
+
+  storage-authzdb: |-
+    version 2.1
+
+    authorize admin    read-write    0    0 / / /
+    authorize desyuser read-write 1000 2000 / / /
+    authorize kermit   read-write 1000 1000 / / /
diff --git a/templates/door.yaml b/templates/door.yaml
@@ -45,6 +45,22 @@ spec:
           mountPath: /opt/dcache/etc/exports
           subPath: exports
           readOnly: true
+        - name: gplazma-conf
+          mountPath: /opt/dcache/etc/gplazma.conf
+          subPath: gplazma.conf
+          readOnly: true
+        - name: grid-mapfile
+          mountPath: /opt/dcache/etc/grid-mapfile
+          subPath: grid-mapfile
+          readOnly: true
+        - name: vorolemap
+          mountPath: /opt/dcache/etc/grid-vorolemap
+          subPath: grid-vorolemap
+          readOnly: true
+        - name: storage-authzdb
+          mountPath: /opt/dcache/etc/storage-authzdb
+          subPath: storage-authzdb
+          readOnly: true
         - name: certs
           mountPath: /opt/dcache/etc/certs
           readOnly: true
@@ -89,3 +105,27 @@ spec:
           items:
           - key: "export"
             path: "exports"
+      - name: gplazma-conf
+        configMap:
+          name: {{ $.Release.Name }}-configmap
+          items:
+          - key: "gplazma.conf"
+            path: "gplazma.conf"
+      - name: grid-mapfile
+        configMap:
+          name: {{ $.Release.Name }}-configmap
+          items:
+          - key: "grid-mapfile"
+            path: "grid-mapfile"
+      - name: vorolemap
+        configMap:
+          name: {{ $.Release.Name }}-configmap
+          items:
+          - key: "grid-vorolemap"
+            path: "grid-vorolemap"
+      - name: storage-authzdb
+        configMap:
+          name: {{ $.Release.Name }}-configmap
+          items:
+          - key: "storage-authzdb"
+            path: "storage-authzdb"