-
Notifications
You must be signed in to change notification settings - Fork 38
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
secrets: pass reana user id to workflow engines #212
Conversation
okraskaj
commented
Jun 18, 2019
- addresses jobs: mounting user secrets inside jobs reana-job-controller#147
81806ec
to
c232f52
Compare
job_controller_container.volume_mounts = [ | ||
{ | ||
'name': 'default-shared-volume', | ||
'mountPath': SHARED_FS_MAPPING['MOUNT_DEST_PATH'], | ||
}, | ||
{ | ||
'name': owner_id, | ||
'mountPath': "/etc/reana/secrets", |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
We should extract this to configuration, also in https://github.com/reanahub/reana-job-controller/pull/158/files#diff-669c9f342cac1a455e5c652c40abf085R130.
Package configuration for now, once we merge we create an issue to move it to REANA-Commons.
@@ -358,12 +365,42 @@ def _create_job_spec(self, name, command=None, image=None, | |||
if os.getenv('FLASK_ENV') == 'development': | |||
job_controller_env_vars.extend( | |||
current_app.config['DEBUG_ENV_VARS']) | |||
job_controller_env_vars.extend([{ |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
The code here and here https://github.com/reanahub/reana-job-controller/pull/158/files#diff-669c9f342cac1a455e5c652c40abf085R103 is very similar, we should create a refactor issue pointing to this code once merged.