New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

add init script to factory to force SHA1 #169

Closed

jdost321 wants to merge 1 commit into opensciencegrid:main from jdost321:factory_crypto

Contributor

jdost321 commented Jan 10, 2024

No description provided.


          add init script to factory to force SHA1

005390e

jdost321 requested review from brianhlin and jthiltges

January 10, 2024 22:52

Contributor

matyasselmeci commented Jan 10, 2024 •

edited

Loading

We take care of this in the software-base image: if you launch the image with the environment variable ENABLE_SHA1=YES then it does exactly this.

https://github.com/opensciencegrid/docker-software-base/blob/master/Dockerfile#L87-L90

Contributor Author

jdost321 commented Jan 10, 2024

How do I set ENABLE_SHA1=YES then for the k8s factory?

Contributor

matyasselmeci commented Jan 10, 2024

In the env section for the container in the deployment. So add

- name: ENABLE_SHA1
  value: YES

in tiger-osg-config under manifests/base/gwms-factory/deployment.yaml, here
https://github.com/opensciencegrid/tiger-osg-config/blob/0048feca1931a9933342617ecfea1ee7a60c117a/manifests/base/gwms-factory/deployment.yaml#L47

Contributor

matyasselmeci commented Jan 10, 2024

or https://github.com/opensciencegrid/tiger-osg-config/blob/0048feca1931a9933342617ecfea1ee7a60c117a/manifests/development/gwms-factory/patch-deployment.yaml#L10 for the devel factory and https://github.com/opensciencegrid/tiger-osg-config/blob/0048feca1931a9933342617ecfea1ee7a60c117a/manifests/production/gwms-factory/patch-deployment.yaml#L10 for the prod factory

Contributor Author

jdost321 commented Jan 10, 2024

great thanks. I forgot we're already setting some vars that way. I'll close this one then.

Jeff

jdost321 closed this

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet