feat: fix permissions

Signed-off-by: Zuhair AlSader <zuhair@koor.tech>
koor-tech · zalsader · Dec 20, 2023 · Dec 12, 2023 · Dec 12, 2023 · Dec 12, 2023
commit 7b890bdb989c67f402386b75368f78827b026730
diff --git a/knative/README.md b/knative/README.md
@@ -46,6 +46,7 @@ https://knative.dev/docs/serving/configuration/feature-flags/#kubernetes-persist
     features:
       kubernetes.podspec-persistent-volume-claim: "enabled"
       kubernetes.podspec-persistent-volume-write: "enabled"
+      kubernetes.podspec-securitycontext: "enabled"
 ```
 
 ## Add pvc to funcs
@@ -67,6 +68,10 @@ run:
 cd producer
 kn func build --registry docker.io/<your_username>
 kn func deploy
+
+# this is to fix permission issues
+kubectl patch services.serving/producer --type merge \
+    -p '{"spec": {"template": {"spec": {"securityContext": {"fsGroup":1000}}}}}'
 ```
 do the same for consumer.
 

diff --git a/knative/consumer/func.yaml b/knative/consumer/func.yaml
@@ -3,7 +3,7 @@ name: consumer
 runtime: go
 registry: docker.io/zuhairkoor
 image: docker.io/zuhairkoor/consumer:latest
-imageDigest: sha256:59ddd4ac3fedeb78e7e6a68d0908dae7edc84d3c0f7732c25a92d4f10e9088d0
+imageDigest: sha256:d671445b1eb0feba973cbdd5ddb3f186789ddf96ab675670070c809266c991ac
 created: 2023-12-13T00:39:05.888786906-05:00
 build:
   builder: pack

diff --git a/knative/deploy/cronjob.yaml b/knative/deploy/cronjob.yaml
@@ -0,0 +1,70 @@
+apiVersion: batch/v1
+kind: CronJob
+metadata:
+  name: busybot
+spec:
+  schedule: "* * * * *"
+  successfulJobsHistoryLimit: 10
+  failedJobsHistoryLimit: 5
+  concurrencyPolicy: Replace
+  jobTemplate:
+    metadata:          
+      labels:
+        app: busybot
+        cron: busybot
+    spec:
+      template:
+        spec:
+          containers:
+          - name: busybot-cont
+            image: alpine:3.18.4
+            imagePullPolicy: IfNotPresent
+            env:
+            - name: STORE
+              value: /store
+            - name: COUNT
+              value: "5"
+            - name: DEL_COUNT
+              value: "2"
+            - name: SIZE
+              value: 50M
+            volumeMounts:
+            - name: knative-pc-cephfs
+              mountPath: /store
+            command:
+            - /bin/sh
+            - -c
+            - |
+
+              echo Reading directory
+              echo "Number of files: $(ls $STORE | wc -l)"
+
+              # Read $COUNT random files from store and calculate md5
+              ls $STORE | shuf -n $COUNT | while read file
+              do
+                md5sum $STORE/$file
+              done
+
+              # Write $COUNT random files from store
+              shuf -n $COUNT -i 0-99 | while read file
+              do
+                dd if=/dev/urandom of=/tmp/file bs=$SIZE count=1
+                md5=$(md5sum /tmp/file | awk '{ print $1 }')
+                filename=$(printf "%02d" $file)
+                echo Writing $filename
+                rm -f $STORE/$filename-*
+                mv /tmp/file $STORE/$filename-$md5
+              done
+
+              # Delete $DEL_COUNT random files from store
+              ls $STORE | shuf -n $DEL_COUNT | while read file
+              do
+                echo Deleting $file
+                rm $STORE/$file
+              done
+          restartPolicy: Never
+          volumes:
+          - name: knative-pc-cephfs
+            persistentVolumeClaim:
+              claimName: knative-pc-cephfs
+              readOnly: false
diff --git a/knative/deploy/serving.yaml b/knative/deploy/serving.yaml
@@ -20,4 +20,5 @@ spec:
       ingress-class: "kourier.ingress.networking.knative.dev"
     features:
       kubernetes.podspec-persistent-volume-claim: "enabled"
-      kubernetes.podspec-persistent-volume-write: "enabled"
+      kubernetes.podspec-persistent-volume-write: "enabled"
+      kubernetes.podspec-securitycontext: "enabled"
diff --git a/knative/list/func.yaml b/knative/list/func.yaml
@@ -3,7 +3,7 @@ name: list
 runtime: go
 registry: docker.io/zuhairkoor
 image: docker.io/zuhairkoor/list:latest
-imageDigest: sha256:be980eef1d2008e7bf8b308051824d1048698e239d8986554ff3e08b66ff385d
+imageDigest: sha256:62b1a99f81cde6454ace5433e8eb2c142fc35a947af6162cbd304c1e5d11b622
 created: 2023-12-19T00:25:46.352372057-05:00
 build:
   builder: pack

diff --git a/knative/producer/func.yaml b/knative/producer/func.yaml
@@ -3,7 +3,7 @@ name: producer
 runtime: go
 registry: docker.io/zuhairkoor
 image: docker.io/zuhairkoor/producer:latest
-imageDigest: sha256:c17987414b33618cf2490ae23e31280dd5a68dd0a6a4571e71288380fe0efe02
+imageDigest: sha256:3c512a3390b26d5f9259b329e2d9d5316d4dfe9f6eb38c8a4e0c61388394c9e4
 created: 2023-12-13T00:38:54.564292994-05:00
 build:
   builder: pack