From 56849e4204869e205c6d8bf052811af6618e2193 Mon Sep 17 00:00:00 2001 From: Stavros Date: Wed, 31 Jul 2024 17:36:24 +0200 Subject: [PATCH 1/3] wip --- reana_job_controller/kubernetes_job_manager.py | 7 ++++++- 1 file changed, 6 insertions(+), 1 deletion(-) diff --git a/reana_job_controller/kubernetes_job_manager.py b/reana_job_controller/kubernetes_job_manager.py index 87f69c69..d942c5b6 100644 --- a/reana_job_controller/kubernetes_job_manager.py +++ b/reana_job_controller/kubernetes_job_manager.py @@ -155,7 +155,7 @@ def execute(self): "template": { "metadata": { "name": backend_job_id, - "labels": {"reana-run-job-workflow-uuid": self.workflow_uuid}, + "labels": {"reana-run-job-workflow-uuid": self.workflow_uuid, "test":"test"}, }, "spec": { "automountServiceAccountToken": False, @@ -167,6 +167,11 @@ def execute(self): "name": "job", "env": [], "volumeMounts": [], + "securityContext": [ + { + "allowPrivilegeEscalation": "false" + } + ], } ], "initContainers": [], From 0ec06da9a8510a8f39d371775e3869dc72deeb9a Mon Sep 17 00:00:00 2001 From: Stavros Date: Thu, 1 Aug 2024 14:02:39 +0200 Subject: [PATCH 2/3] wip --- reana_job_controller/kubernetes_job_manager.py | 5 ++--- 1 file changed, 2 insertions(+), 3 deletions(-) diff --git a/reana_job_controller/kubernetes_job_manager.py b/reana_job_controller/kubernetes_job_manager.py index d942c5b6..ce0d6420 100644 --- a/reana_job_controller/kubernetes_job_manager.py +++ b/reana_job_controller/kubernetes_job_manager.py @@ -155,7 +155,7 @@ def execute(self): "template": { "metadata": { "name": backend_job_id, - "labels": {"reana-run-job-workflow-uuid": self.workflow_uuid, "test":"test"}, + "labels": {"reana-run-job-workflow-uuid": self.workflow_uuid}, }, "spec": { "automountServiceAccountToken": False, @@ -167,11 +167,10 @@ def execute(self): "name": "job", "env": [], "volumeMounts": [], - "securityContext": [ + "securityContext": { "allowPrivilegeEscalation": "false" } - ], } ], "initContainers": [], From e3187aa30e6ef102c6343df9ffc2413f420af219 Mon Sep 17 00:00:00 2001 From: Stavros Date: Thu, 1 Aug 2024 15:18:14 +0200 Subject: [PATCH 3/3] wip --- reana_job_controller/kubernetes_job_manager.py | 7 ++----- 1 file changed, 2 insertions(+), 5 deletions(-) diff --git a/reana_job_controller/kubernetes_job_manager.py b/reana_job_controller/kubernetes_job_manager.py index ce0d6420..7678f7fc 100644 --- a/reana_job_controller/kubernetes_job_manager.py +++ b/reana_job_controller/kubernetes_job_manager.py @@ -167,11 +167,8 @@ def execute(self): "name": "job", "env": [], "volumeMounts": [], - "securityContext": - { - "allowPrivilegeEscalation": "false" - } - } + "securityContext": {"allowPrivilegeEscalation": False}, + }, ], "initContainers": [], "volumes": [],