TODO for complete deployment
-
: host grid certificates - How to manage grid certificates with pods ? : LHCb does one certificate for all pods.
-
: Secrets for DIRAC configuration: dirac.cfg and masterCS.cfg as well as certificates: Vault is only availaible for admins for now (but should be the easiest solution at the end), otherwise use "helm secrets" -
: pvc ? -
: Create Databases pods -
: Manage outside connexions + Sites connexion (DESY only ?) -
: Install agent by adding DIRAC_CMD = "dirac-agent" -
: install db before running the services using a new helm variable: "db: JobDB" then run "dirac-install-db" before "dirac-service" -
: Push helm package in Harbor: Click to expand
Since we have oidc you have to log in to harbor and then get the CLI secret in your profile. Only then you can send data with the api (see https://goharbor.io/docs/1.10/administration/configure-authentication/oidc-auth/ "Using OIDC from the Docker or Helm CLI"). I have created a helm-dpps project at https://oci-reg-cta.zeuthen.desy.de/. You should be able to push the helm chart there. I used a different harbor but it should work about the same for you: tar -czvf dist/redmine.tgz helm helm registry login -u znapb oci-reg-dv.zeuthen.desy.de helm push dist/redmine.tgz oci://oci-reg-dv.zeuthen.desy.de/helm-dv in helm i used the chart as follows: oci://oci-reg-dv.zeuthen.desy.de/helm-dv/redmine
Edited by Natthan.Pigoux