add secrets as secretMounts to rucio service manifests

vre-hub · Nov 27, 2023 · 68f60de · 68f60de
1 parent fd3e0ff
commit 68f60de
Show file tree

Hide file tree

Showing 3 changed files with 15 additions and 6 deletions.
diff --git a/infrastructure/cluster/flux/rucio-dev/rucio-dev-daemons.yaml b/infrastructure/cluster/flux/rucio-dev/rucio-dev-daemons.yaml
@@ -424,13 +424,16 @@ spec:
         - secretName: fts-key
           mountPath: /opt/rucio/keys/ewp2c01-key.pem
           subPath: ewp2c01-key.pem
+        - secretName: idpsecrets
+          mountPath: /opt/rucio/etc/idpsecrets.json
+          subPath: idpsecrets.json
       additionalEnvs:
-        - name: USERCERT_NAME
-          value: ewp2c01-cert.pem
-        - name: USERKEY_NAME
-          value: ewp2c01-key.pem
-        - name: RUCIO_FTS_SECRETS
-          value: daemons-dev-rucio-x509up 
+        # - name: USERCERT_NAME
+        #   value: ewp2c01-cert.pem
+        # - name: USERKEY_NAME
+        #   value: ewp2c01-key.pem
+        # - name: RUCIO_FTS_SECRETS
+        #   value: daemons-dev-rucio-x509up 
       resources:
         limits:
           cpu: 500m

diff --git a/infrastructure/cluster/flux/rucio-dev/rucio-dev-serversAuth.yaml b/infrastructure/cluster/flux/rucio-dev/rucio-dev-serversAuth.yaml
@@ -35,6 +35,9 @@ spec:
       - secretName: server-cafile
         mountPath: /etc/grid-security/ca.pem
         subPath: ca.pem
+      - secretName: idpsecrets
+        mountPath: /opt/rucio/etc/idpsecrets.json
+        subPath: idpsecrets.json
 
     additionalEnvs: 
       # # **KIKE**: This is gonna be a pain in the ass.

diff --git a/infrastructure/cluster/flux/rucio-dev/rucio-dev-ui.yaml b/infrastructure/cluster/flux/rucio-dev/rucio-dev-ui.yaml
@@ -34,6 +34,9 @@ spec:
       - secretName: cafile
         mountPath: /etc/grid-security/ca.pem
         subPath: ca.pem
+      - secretName: idpsecrets
+        mountPath: /opt/rucio/etc/idpsecrets.json
+        subPath: idpsecrets.json
 
     replicaCount: 1
     exposeErrorLogs: True