Try to get the webeos-base deploymentConfig to work
As discussed:
-
set command to run-eos-credentials-manager.sh for the credentials-manager container -
we need a new emptyDir to share the kerberos credential cache file between cred manager and httpd containers Previously this was done via a path under /eos/.eoscredentials but that is not available anymore. Get rid of all the /eos references, We just need to put the CC file in an emptyDir shared with httpd container. - the file MUST be owned by the non-root identity (sth_UID env var)
-
instead of using the script in the image, inject the new run-eos-credentials-manager.sh from a configmap in the webeos-deployment project -
update the configController image (in okd4-install subchart/webeos) -
configController set up RBAC -
security consideration: emptyDir volumes like logs and vhosts must only be accessible by root. we'll probably need an initContainer to chmod
/chown
these emptyDirs as necessary.
Edited by Joao Esteves Marcal