elixir-cloud-aai / cwl-WES

Trigger CWL workflows via GA4GH WES and TES
Apache License 2.0
16 stars 18 forks source link

Add securityContext and fix rabbitMQ cookie #232

Open viktoriaas opened 2 years ago

viktoriaas commented 2 years ago

Issue introduces 2 problems together with a PR solving them.

  1. Clusters with security policy enabled often forbid the usage of root. Therefore it is necessary to add optional securityContext to all deployments and to wes ConfigMap.

  2. If rabbitMQ deployment is restarted (e.g. due to cluster failure) rabbitMQ cookie has incorrect permissions after restart ( rw-rw---- instead of rw-------). This is solved by chmod in main container before calling rabbitmq.