-
Notifications
You must be signed in to change notification settings - Fork 0
/
job.template.yaml
70 lines (70 loc) · 1.82 KB
/
job.template.yaml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
apiVersion: batch/v1
kind: Job
metadata:
labels:
argocd.argoproj.io/instance: fileservers
lsst.io/category: fileserver
lsst.io/user: {{username}}
name: {{username}}-fs
namespace: fileservers
spec:
template:
metadata:
labels:
argocd.argoproj.io/instance: fileservers
job-name: {{username}}-fs
lsst.io/category: fileserver
lsst.io/user: {{username}}
name: {{username}}-fs
namespace: fileservers
spec:
containers:
- env:
- name: WORBLEHAT_BASE_HREF
value: /files/{{username}}
- name: WORBLEHAT_TIMEOUT
value: "{{timeout}}"
- name: WORBLEHAT_DIR
value: /mnt
image: ghcr.io/lsst-sqre/worblehat:latest
imagePullPolicy: "{{pullPolicy}}"
name: fileserver
ports:
- containerPort: 8000
name: http
protocol: TCP
resources:
limits:
cpu: 100m
memory: 128M
securityContext:
runAsUser: {{uid}}
runAsGroup: {{gid}}
fsGroup: {{gid}}
runAsNonRoot: true
supplementalGroups: {{gids}}
allowPrivilegeEscalation: false
readOnlyRootFilesystem: true
terminationMessagePath: /dev/termination-log
terminationMessagePolicy: File
volumeMounts:
- mountPath: /mnt/{v1}
name: {v1}
- mountPath: /mnt/{v2}
name: {v2}
restartPolicy: Never
securityContext:
fsGroup: {{gid}}
runAsGroup: {{gid}}
runAsNonRoot: true
runAsUser: {{uid}}
supplementalGroups: [ {{gids}} ]
volumes:
- name: {{v1}}
nfs:
path: {{v1path}}
server: {{v1server}}
- name: {{v2}
nfs:
path: {{v2path}}
server: {{v2server}}