apply changes to rucio servers

vre-hub · Jun 28, 2024 · b27d748 · b27d748
1 parent 56c677d
commit b27d748
Show file tree

Hide file tree

Showing 2 changed files with 39 additions and 40 deletions.
diff --git a/infrastructure/cluster/flux/rucio-dev/rucio-dev-servers.yaml b/infrastructure/cluster/flux/rucio-dev/rucio-dev-servers.yaml
@@ -40,11 +40,10 @@ spec:
       #   subPath: rse-accounts.cfg
 
     additionalEnvs: 
-      # # **KIKE**: This is gonna be a pain in the ass.
-      # - name: RUCIO_CA_PATH
-      #   value: "/etc/grid-security/certificates"
-      # - name: RUCIO_SSL_PROTOCOL
-      #   value: "-SSLv3 -TLSv1 -TLSv1.1 +TLSv1.2 +TLSv1.3"
+      - name: RUCIO_CA_PATH
+        value: "/etc/grid-security/certificates"
+      - name: RUCIO_SSL_PROTOCOL
+        value: "-SSLv3 -TLSv1 -TLSv1.1 +TLSv1.2 +TLSv1.3"
       # - name: RUCIO_HTTPD_PROXY_PROTOCOL_EXCEPTIONS
       #   valueFrom:
       #     fieldRef:
@@ -78,32 +77,32 @@ spec:
 
     serverType: flask
 
-    automaticRestart:
-      enabled: 1
-      image:
-        repository: bitnami/kubectl
-        tag: latest
-        pullPolicy: IfNotPresent
-      schedule: "01 0 * * *"
-      selectorLabel: "'release in (servers-dev),app in (rucio-dev)'"
+    # automaticRestart:
+    #   enabled: 1
+    #   image:
+    #     repository: bitnami/kubectl
+    #     tag: latest
+    #     pullPolicy: IfNotPresent
+    #   schedule: "01 0 * * *"
+    #   selectorLabel: "'release in (servers-dev),app in (rucio-dev)'"
 
-    httpd_config:
-      mpm_mode: "event"
-      timeout: "300"
-      enable_status: "True"
-      legacy_dn: "True"
-      keep_alive: "On"
-      keep_alive_timeout: "5"
-      max_keep_alive_requests: "128"
-      server_limit: "10"
-      start_servers: "4"
-      thread_limit: "128"
-      threads_per_child: "128"
-      min_spare_threads: "256"
-      max_spare_threads: "512"
-      max_request_workers: "1280"
-      max_connections_per_child: "2048"
-      max_clients: "20"
+    # httpd_config:
+    #   mpm_mode: "event"
+    #   timeout: "300"
+    #   enable_status: "True"
+    #   legacy_dn: "True"
+    #   keep_alive: "On"
+    #   keep_alive_timeout: "5"
+    #   max_keep_alive_requests: "128"
+    #   server_limit: "10"
+    #   start_servers: "4"
+    #   thread_limit: "128"
+    #   threads_per_child: "128"
+    #   min_spare_threads: "256"
+    #   max_spare_threads: "512"
+    #   max_request_workers: "1280"
+    #   max_connections_per_child: "2048"
+    #   max_clients: "20"
       # mpm_mode: "worker"
 
     ## values used to configure Rucio

diff --git a/infrastructure/cluster/flux/rucio-dev/rucio-dev-serversAuth.yaml b/infrastructure/cluster/flux/rucio-dev/rucio-dev-serversAuth.yaml
@@ -25,16 +25,16 @@ spec:
       targetPath: config.database.default
 
   values:
-    # secretMounts:
-    #   - secretName: server-hostcert
-    #     mountPath: /etc/grid-security/hostcert.pem
-    #     subPath: hostcert.pem
-    #   - secretName: server-hostkey
-    #     mountPath: /etc/grid-security/hostkey.pem
-    #     subPath: hostkey.pem
-    #   - secretName: server-cafile
-    #     mountPath: /etc/grid-security/ca.pem
-    #     subPath: ca.pem
+    secretMounts:
+      - secretName: server-hostcert
+        mountPath: /etc/grid-security/hostcert.pem
+        subPath: hostcert.pem
+      - secretName: server-hostkey
+        mountPath: /etc/grid-security/hostkey.pem
+        subPath: hostkey.pem
+      - secretName: server-cafile
+        mountPath: /etc/grid-security/ca.pem
+        subPath: ca.pem
       # - secretName: idpsecrets
       #   mountPath: /opt/rucio/etc/idpsecrets.json
       #   subPath: idpsecrets.json