fix(kerberos): stop ticket renewal when pod is terminated (reanahub#454)

Closes reanahub/reana-job-controller#449
mdonadoni · Apr 18, 2024 · a7bcf7a · a7bcf7a
1 parent 08cbfa1
commit a7bcf7a
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/reana_commons/k8s/kerberos.py b/reana_commons/k8s/kerberos.py
@@ -126,6 +126,12 @@ def get_kerberos_k8s_config(
         "volumeMounts": [secrets_volume_mount] + volume_mounts,
         "env": env,
         "securityContext": {"runAsUser": kubernetes_uid},
+        "lifecycle": {
+            # make sure we stop the sidecar container when the pod is stopped,
+            # for example when the run-batch pod is terminated by reana-workflow-controller
+            # after the workflow finishes (either successfully or with an error)
+            "preStop": {"exec": {"command": ["touch", KRB5_STATUS_FILE_LOCATION]}}
+        },
     }
 
     return KerberosConfig(