Comments (6)
Problem was reproduced with
bash-4.2$ arcproxy --version
arcproxy version 6.4.1
will need to wait for arcproxy > 6.12 to be on CVMFS.
from harvester.
We can get arcproxy 6.15.1 from ALRB now (lsetup emi) so I think it should be possible to address this now.
@fbarreir
from harvester.
@fbarreir This is another case where proxy checks would be useful: PanDAWMS/pilot3#52
from harvester.
@fbarreir the mode of the secret volume needs to be set for this to work. It should look like this in YAML e.g.
volumes:
- name: proxy-volume
secret:
secretName: proxy-secret
defaultMode: 0400
BUT note https://kubernetes.io/docs/concepts/configuration/secret/#secret-files-permissions
If you're using JSON to contact the k8s API it should be 256 instead.
from harvester.
The secret volume is defined in the job template. I changed the mode for your TEST queue:
https://github.com/PanDAWMS/harvester_configurations/blob/master/K8S/job_templates/CA-VICTORIA-K8S-TEST-T2_job.yaml#L72
I checked a log and it does seem to work.
FYI, FaHui implemented a git collector/synchronizer for harvester and since recently any change done in github will be propagated automatically to harvester. E.g. if you want to enable the proxy checks in the production queue, you can change the mode for your production job template and then enable/disable the check in CRIC.
from harvester.
Oh I did not realize that was in the YAML template.
That is great that Fa Hui automated updates from git!
from harvester.
Related Issues (20)
- K8s: Connection errors to cluster lead to cancelled workers HOT 1
- K8S: state that can be considered failed, but is treated as pending
- K8s: improve ephemeral storage management HOT 11
- state to consider failed in k8s monitor
- K8S: nodes to remove from GKE
- enforcing memory limits with safety factor for k8s jobs HOT 7
- optional priorityClasses for score / mcore jobs HOT 3
- Version number should be updated HOT 1
- set job and node environment variables for k8s HOT 5
- Raythena scope set incorrectly for output files HOT 4
- K8s: get rid of startup script
- Optional pip dependencies HOT 1
- Implement minNewWorkersPerCycle? HOT 3
- Bug when checking missing attributes HOT 2
- RT aggregations not respected for GrandUnified queues HOT 1
- Job fetcher does not pick up new queues correctly HOT 1
- Are there plans to implement this function? HOT 2
- k8s queue customization through CRIC HOT 8
- check_credential_lifetime not in ArcproxyCredManager HOT 3
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from harvester.