diff --git a/infrastructure/cluster/flux/rucio-dev/rucio-dev-servers.yaml b/infrastructure/cluster/flux/rucio-dev/rucio-dev-servers.yaml index dd5cecf..b42900b 100644 --- a/infrastructure/cluster/flux/rucio-dev/rucio-dev-servers.yaml +++ b/infrastructure/cluster/flux/rucio-dev/rucio-dev-servers.yaml @@ -40,11 +40,10 @@ spec: # subPath: rse-accounts.cfg additionalEnvs: - # # **KIKE**: This is gonna be a pain in the ass. - # - name: RUCIO_CA_PATH - # value: "/etc/grid-security/certificates" - # - name: RUCIO_SSL_PROTOCOL - # value: "-SSLv3 -TLSv1 -TLSv1.1 +TLSv1.2 +TLSv1.3" + - name: RUCIO_CA_PATH + value: "/etc/grid-security/certificates" + - name: RUCIO_SSL_PROTOCOL + value: "-SSLv3 -TLSv1 -TLSv1.1 +TLSv1.2 +TLSv1.3" # - name: RUCIO_HTTPD_PROXY_PROTOCOL_EXCEPTIONS # valueFrom: # fieldRef: @@ -78,32 +77,32 @@ spec: serverType: flask - automaticRestart: - enabled: 1 - image: - repository: bitnami/kubectl - tag: latest - pullPolicy: IfNotPresent - schedule: "01 0 * * *" - selectorLabel: "'release in (servers-dev),app in (rucio-dev)'" + # automaticRestart: + # enabled: 1 + # image: + # repository: bitnami/kubectl + # tag: latest + # pullPolicy: IfNotPresent + # schedule: "01 0 * * *" + # selectorLabel: "'release in (servers-dev),app in (rucio-dev)'" - httpd_config: - mpm_mode: "event" - timeout: "300" - enable_status: "True" - legacy_dn: "True" - keep_alive: "On" - keep_alive_timeout: "5" - max_keep_alive_requests: "128" - server_limit: "10" - start_servers: "4" - thread_limit: "128" - threads_per_child: "128" - min_spare_threads: "256" - max_spare_threads: "512" - max_request_workers: "1280" - max_connections_per_child: "2048" - max_clients: "20" + # httpd_config: + # mpm_mode: "event" + # timeout: "300" + # enable_status: "True" + # legacy_dn: "True" + # keep_alive: "On" + # keep_alive_timeout: "5" + # max_keep_alive_requests: "128" + # server_limit: "10" + # start_servers: "4" + # thread_limit: "128" + # threads_per_child: "128" + # min_spare_threads: "256" + # max_spare_threads: "512" + # max_request_workers: "1280" + # max_connections_per_child: "2048" + # max_clients: "20" # mpm_mode: "worker" ## values used to configure Rucio diff --git a/infrastructure/cluster/flux/rucio-dev/rucio-dev-serversAuth.yaml b/infrastructure/cluster/flux/rucio-dev/rucio-dev-serversAuth.yaml index c4f10aa..19ff1df 100644 --- a/infrastructure/cluster/flux/rucio-dev/rucio-dev-serversAuth.yaml +++ b/infrastructure/cluster/flux/rucio-dev/rucio-dev-serversAuth.yaml @@ -25,16 +25,16 @@ spec: targetPath: config.database.default values: - # secretMounts: - # - secretName: server-hostcert - # mountPath: /etc/grid-security/hostcert.pem - # subPath: hostcert.pem - # - secretName: server-hostkey - # mountPath: /etc/grid-security/hostkey.pem - # subPath: hostkey.pem - # - secretName: server-cafile - # mountPath: /etc/grid-security/ca.pem - # subPath: ca.pem + secretMounts: + - secretName: server-hostcert + mountPath: /etc/grid-security/hostcert.pem + subPath: hostcert.pem + - secretName: server-hostkey + mountPath: /etc/grid-security/hostkey.pem + subPath: hostkey.pem + - secretName: server-cafile + mountPath: /etc/grid-security/ca.pem + subPath: ca.pem # - secretName: idpsecrets # mountPath: /opt/rucio/etc/idpsecrets.json # subPath: idpsecrets.json