add configmaps volumes

charts/jupyter-hub-customizations/templates/configmap_values.yaml

@@ -39,6 +39,114 @@ data:
           secretKeyRef:
             name: {{ .Values.oauthSecret }}
             key: client_secret
+      extraVolumes:
+        - name: shared-data
+          emptyDir: {}
+        - name: init-script
+          configMap:
+            defaultMode: 400
+            name: {{ .Values.global.name }}-init-script
+        - name: check-frontend-files
+          configMap:
+            defaultMode: 400
+            name: {{ .Values.global.name }}-check-frontend-files
+        - name: sidecar-nginx-config
+          configMap:
+            defaultMode: 400
+            name: {{ .Values.global.name }}-sidecar-nginx-config
+        - name: reservation-keypair
+          secret:
+            secretName: reservation-keypair
+        - name: tunnel-certs
+          secret:
+            secretName: tunnel-certs-public
+            items:
+              - key: tls.ca
+                path: ca.pem
+        - name: twofa-keypair
+          secret:
+            secretName: twofa-keypair
+            items:
+              - key: ssh-privatekey
+                path: twofa
+                mode: 0400
+        - name: twofa-remove-keypair
+          secret:
+            secretName: twofa-remove-keypair
+            items:
+              - key: ssh-privatekey
+                path: twofa
+                mode: 0400
+        - name: tz-config
+          hostPath:
+            path: /usr/share/zoneinfo/Europe/Berlin
+      initContainers:
+        - name: prepare-shared-data
+          image: alpine:3.18
+          imagePullPolicy: Always
+          command: ["/bin/sh"]
+          args:
+            - -c
+            - >-
+              apk add bash git &&
+              /bin/bash /mnt/init_script/..data/run.sh &&
+              /bin/bash /mnt/check_frontend_files/..data/run.sh once &&
+              mkdir -p /mnt/shared-data/reservation_key &&
+              cp -rp /mnt/reservation-keypair/..data/* /mnt/shared-data/reservation_key/. &&
+              chown 1000:1000 -R /mnt/shared-data/reservation_key &&
+              chmod 400 /mnt/shared-data/reservation_key/*
+          volumeMounts:
+            - name: shared-data
+              mountPath: /mnt/shared-data
+            - name: persistent
+              mountPath: /mnt/persistent
+            - name: internal-ssl
+              mountPath: /mnt/internal_ssl
+              readOnly: true
+            - name: reservation-keypair
+              mountPath: /mnt/reservation-keypair
+            - name: init-script
+              mountPath: /mnt/init_script
+            - name: check-frontend-files
+              mountPath: /mnt/check_frontend_files
+            - name: twofa-keypair
+              mountPath: /mnt/twofa_keypair
+            - name: twofa-remove-keypair
+              mountPath: /mnt/twofa_remove_keypair
+      extraContainers:
+        - name: check-frontend-files
+          image: alpine:3.18
+          imagePullPolicy: Always
+          command: ["/bin/sh"]
+          args:
+            - -c
+            - >-
+                apk add bash git &&
+                /bin/bash /mnt/check_frontend_files/..data/run.sh
+          volumeMounts:
+            - name: shared-data
+              mountPath: /mnt/shared-data
+            - name: check-frontend-files
+              mountPath: /mnt/check_frontend_files
+            - name: tz-config
+              mountPath: /etc/localtime
+        - name: sidecar-nginx
+          image: nginx:1.25.3-alpine3.18-slim
+          imagePullPolicy: Always
+          ports:
+            - containerPort: 8070
+              protocol: TCP
+          volumeMounts:
+            - name: shared-data
+              mountPath: /mnt/shared-data
+            - name: sidecar-nginx-config
+              mountPath: /etc/nginx/nginx.conf
+              subPath: nginx.conf
+            - name: sidecar-nginx-config
+              mountPath: /etc/nginx/conf.d/jupyter.conf
+              subPath: jupyter.conf
+            - name: tz-config
+              mountPath: /etc/localtime
     proxy:
       chp:
         defaultTarget: "https://{{ .Values.global.name }}-hub:8081"