gcs.yaml

apiVersion: apps/v1
kind: Deployment
metadata:
  name: globus-connect
spec:
  selector:
    matchLabels:
      run: globus-connect
  replicas: 1
  template:
    metadata:
      labels:
        run: globus-connect
    spec:
      hostNetwork: true
      initContainers:
      - name: "globus-setup"
        image: lincolnbryant/gcsv4:latest
        env:
          - name: GLOBUS_USER
            valueFrom:
              secretKeyRef:
                name: globus-credentials
                key: username
          - name: GLOBUS_PASSWORD
            valueFrom:
              secretKeyRef:
                name: globus-credentials
                key: password
          - name: TERM
            value: "xterm"
        command: ["/usr/bin/globus-connect-server-setup"]
        args: ["-c","/etc/globus-connect-server.conf"]
        volumeMounts:
          - name: globus-connect-config
            mountPath: /etc/globus
      containers:
      - name: "myproxy"
        image: lincolnbryant/gcsv4:latest
        env: 
        - name: X509_USER_CERT
          value: "/etc/grid-security/hostcert.pem"
        - name: X509_USER_KEY
          value: "/etc/grid-security/hostkey.pem"
        command: ["/usr/sbin/myproxy-server"]
        args: ["-s","/var/lib/myproxy","-c","/etc/myproxy-server.config","-d"]
        volumeMounts:
          - name: globus-connect-config
            mountPath: /etc/globus
      - name: "gridftp"
        image: lincolnbryant/gcsv4:latest
        command: ["/usr/sbin/globus-gridftp-server"]
        args: ["-c","/etc/gridftp.conf"]
        volumeMounts:
          - name: globus-connect-config
            mountPath: /etc/globus
      volumes:
        - name: globus-connect-config
          configMap:
            name: globus-connect
---
apiVersion: v1
kind: Secret
metadata:
  name: globus-credentials
type: Opaque
data:
  username: 
  password: 
---
apiVersion: v1
kind: ConfigMap
metadata: 
  name: globus-connect
data:
  globus-connect-server.conf: | 
    [Globus]
    User = %(GLOBUS_USER)s
    Password = %(GLOBUS_PASSWORD)s

    [Endpoint]
    Name = %(SHORT_HOSTNAME)s
    Public = False
    DefaultDirectory = /~/

    [Security]
    FetchCredentialFromRelay = True
    IdentityMethod = MyProxy

    [GridFTP]
    Server = %(HOSTNAME)s
    RestrictPaths =

    [MyProxy]
    Server = %(HOSTNAME)s

    [OAuth]