Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

take out scartch eos space and set correctly the RUCIO_PATH_BEGINS_AT… #257

Merged
merged 2 commits into from
Dec 1, 2023
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
10 changes: 2 additions & 8 deletions infrastructure/cluster/flux-v2/jhub/jhub-release.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -173,10 +173,7 @@ spec:
claimName: cvmfs
- name: eulake-cern-eos-rse # mounts the EOS RSE needed for the Rucio JupiterLab extension
hostPath:
path: /var/eos/eulake/escape/data
- name: eulake-scratch-data # mounts the EOS scratch space which is not an RSE
hostPath:
path: /var/eos/eulake/escape/tmp_data
path: /var/eos/eulake # This is pointing to /eos/eulake/escape/data, defined on the eosxd/configmap
extraVolumeMounts:
- name: cvmfs-cern-instance
mountPath: /cvmfs
Expand All @@ -186,9 +183,6 @@ spec:
mountPath: /eos/cern-eos-rse
mountPropagation: HostToContainer
readOnly: true
- name: eulake-scratch-data
mountPath: /eos/scratch-space
mountPropagation: HostToContainer
image:
name: ghcr.io/vre-hub/vre-singleuser
tag: sha-423e01a
Expand All @@ -214,7 +208,7 @@ spec:
RUCIO_DEFAULT_INSTANCE: "vre-rucio.cern.ch"
RUCIO_DESTINATION_RSE: "CERN-EOS"
RUCIO_RSE_MOUNT_PATH: "/eos/cern-eos-rse"
RUCIO_PATH_BEGINS_AT: "4"
RUCIO_PATH_BEGINS_AT: "2"
RUCIO_CA_CERT: "/certs/rucio_ca.pem"
OAUTH2_TOKEN: "FILE:/tmp/eos_oauth.token"
ingress:
Expand Down
17 changes: 15 additions & 2 deletions infrastructure/cluster/manual/eos/README.md
Original file line number Diff line number Diff line change
Expand Up @@ -11,8 +11,21 @@ The `eulake` instance is not configured by default on the CERN OpenStack cluster
Then, add the `eulake` keytab secret as described below. The keytab srcret string can be find on the cern-ver `tbag`.

```bash
> kubectl -n kube-system patch configmap eosxd-config -p '{"data": {"fuse.eulake.conf": "{\"name\": \"eulake\", \"hostport\": \"eoseulake.cern.ch\", \"remotemountdir\": \"/eos/eulake/escape/data\", \"localmountdir\": \"/eos/eulake\"}"}}'
> kubectl -n kube-system patch configmap eosxd-config -p '{"data": {"fuse.eulake.conf": "{\"name\": \"eulake\", \"hostport\": \"eoseulake.cern.ch\", \"remotemountdir\": \"/eos/eulake/escape/data\", \"localmountdir\": \"/eos/eulake\", \"auth\": {\"ssskeytab\": \"/etc/eos.keytab\"}}"}}'
> kubectl -n kube-system patch secret eosxd-keytab -p '{"stringData": {"fuse.sss.keytab": "<KEYSTAB_SECRET_STRING>"}}'
```

Now you can add this volumes on the jupyter hub deployment to access the instance from any pod or jupyter session.
Now you can add this volumes on the jupyter hub deployment to access the instance from any pod or jupyter session. On the jupyter hub helm release

```yaml
extraVolumes:
- name: eulake-cern-eos-rse
hostPath:
# This is pointing to /eos/eulake/escape/data, as defined on the eosxd/configmap
path: /var/eos/eulake
extraVolumeMounts:
- name: eulake-cern-eos-rse # mounts the EOS RSE needed for the Rucio JupiterLab extension
mountPath: /eos/cern-eos-rse
mountPropagation: HostToContainer
readOnly: true
```
Loading