ctao-dpps-clients 0.0.0__tar.gz

ctao_dpps_clients-0.0.0/.gitignore

@@ -0,0 +1,142 @@
+# Files downloaded by the dpps-aiv-toolkit
+helm
+helm.tar.gz
+kind
+kubectl
+linux-amd64
+# generated file
+chart/**/*.tgz
+report.xml
+# setuptools_scm generated version file
+_version.py
+
+# Byte-compiled / optimized / DLL files
+__pycache__/
+*.py[cod]
+*$py.class
+
+# C extensions
+*.so
+
+# Distribution / packaging
+.Python
+build/
+develop-eggs/
+dist/
+downloads/
+eggs/
+.eggs/
+lib/
+lib64/
+parts/
+sdist/
+var/
+wheels/
+pip-wheel-metadata/
+share/python-wheels/
+*.egg-info/
+.installed.cfg
+*.egg
+MANIFEST
+
+# PyInstaller
+#  Usually these files are written by a python script from a template
+#  before PyInstaller builds the exe, so as to inject date/other infos into it.
+*.manifest
+*.spec
+
+# Installer logs
+pip-log.txt
+pip-delete-this-directory.txt
+
+# Unit test / coverage reports
+htmlcov/
+.tox/
+.nox/
+.coverage
+.coverage.*
+.cache
+nosetests.xml
+coverage.xml
+*.cover
+*.py,cover
+.hypothesis/
+.pytest_cache/
+
+# Translations
+*.mo
+*.pot
+
+# Django stuff:
+*.log
+local_settings.py
+db.sqlite3
+db.sqlite3-journal
+
+# Flask stuff:
+instance/
+.webassets-cache
+
+# Scrapy stuff:
+.scrapy
+
+# Sphinx documentation
+docs/_build/
+docs/api
+
+# PyBuilder
+target/
+
+# Jupyter Notebook
+.ipynb_checkpoints
+
+# IPython
+profile_default/
+ipython_config.py
+
+# pyenv
+.python-version
+
+# pipenv
+#   According to pypa/pipenv#598, it is recommended to include Pipfile.lock in version control.
+#   However, in case of collaboration, if having platform-specific dependencies or dependencies
+#   having no cross-platform support, pipenv may install dependencies that don't work, or not
+#   install all needed dependencies.
+#Pipfile.lock
+
+# PEP 582; used by e.g. github.com/David-OConnor/pyflow
+__pypackages__/
+
+# Celery stuff
+celerybeat-schedule
+celerybeat.pid
+
+# SageMath parsed files
+*.sage.py
+
+# Environments
+.env
+.venv
+env/
+venv/
+ENV/
+env.bak/
+venv.bak/
+
+# Spyder project settings
+.spyderproject
+.spyproject
+
+# Rope project settings
+.ropeproject
+
+# mkdocs documentation
+/site
+
+# mypy
+.mypy_cache/
+.dmypy.json
+dmypy.json
+
+# Pyre type checker
+.pyre/

ctao_dpps_clients-0.0.0/.gitlab-ci.yml

@@ -0,0 +1,60 @@
+#
+include:
+  - project: 'cta-computing/dpps/aiv/dpps-aiv-toolkit'
+    ref: 34ef394f4f707dacea789778c718300fa521b10d
+    file: 'ci-functions.yml'
+  - "aiv-config.yml"
+
+
+variables:
+  CHART_LOCATION: chart
+  CHART_NAME: dpps
+  CHART_EXTRA_VALUES: "--set dev.client_image_tag=${DOCKER_TAG}"
+  DPPS_AIV_TOOLKIT_DIR: dpps-aiv-toolkit
+  DOCKER_IMAGE_CONTEXT: '${CI_PROJECT_DIR}'
+  CONDA_IMAGE: "quay.io/condaforge/miniforge3:24.11.3-0"
+
+stages:
+  - prepare
+  - lint
+  - build
+  - sign
+  - tests
+  - sonarqube
+  - publish
+  - report
+
+
+build:
+  variables:
+    CI_HARBOR_REGISTRY_IMAGE: '${HARBOR_HOST}/dpps/dpps-clients:${DOCKER_TAG}'
+  rules:
+    - when: always
+
+
+# wms depends on gfal2 via dirac, which is sessentially impossible to install with pip
+build-docs:
+  image: "${CONDA_IMAGE}"
+
+  before_script:
+    - source /opt/conda/etc/profile.d/conda.sh
+    - mamba create -y -n ci python=3.12 gfal2 m2crypto dirac-grid make
+    - conda activate ci
+    - python --version
+    - pip install .[doc]
+
+
+pylint:
+  image: "${CONDA_IMAGE}"
+
+  before_script:
+    - apt update && apt install -y --no-install-recommends git
+    - source /opt/conda/etc/profile.d/conda.sh
+    - mamba create -y -n ci python=3.12 gfal2 m2crypto dirac-grid pylint
+    - conda activate ci
+    - python --version
+    - pip install .[all]
+
+sign:
+  rules:
+    - when: never

ctao_dpps_clients-0.0.0/.gitmodules

@@ -0,0 +1,9 @@
+[submodule "dpps-aiv-toolkit"]
+	path = dpps-aiv-toolkit
+	url = ../aiv/dpps-aiv-toolkit.git
+[submodule "dpps-release-plan"]
+	path = dpps-release-plan
+	url = ../dpps-project-management/dpps-release-plan.git
+[submodule "requirements-traceability"]
+	path = requirements-traceability
+	url = ../dpps-project-management/requirements-traceability.git

ctao_dpps_clients-0.0.0/.pre-commit-config.yaml

@@ -0,0 +1,47 @@
+repos:
+  - repo: https://github.com/pre-commit/pre-commit-hooks
+    rev: v4.5.0  # Use the ref you want to point at
+    hooks:
+    - id: trailing-whitespace
+      exclude: ".*\\.fits(\\.fz)?"
+    - id: check-added-large-files
+    - id: check-case-conflict
+    - id: check-merge-conflict
+      exclude: ".*\\.fits(\\.fz)?"
+    - id: end-of-file-fixer
+      exclude: '(.*\.fits(\.fz)?)|(.*.patch.*)|(chart\/.*README.md)$'
+
+
+  - repo: https://github.com/codespell-project/codespell
+    rev: v2.2.4
+    hooks:
+    - id: codespell
+      additional_dependencies:
+        - tomli
+
+  - repo: https://github.com/astral-sh/ruff-pre-commit
+    rev: v0.2.1
+    hooks:
+      - id: ruff
+        args: [ --fix, --show-fixes ]
+      - id: ruff-format
+
+  - repo: local
+    hooks:
+    - id: CI yaml check
+      args: [ dpps-aiv-toolkit ]
+      name: CI yaml check
+      description: CI yaml check
+      language: script
+      entry: dpps-aiv-toolkit/cicheck.sh
+      pass_filenames: true
+      files: ^.gitlab-ci.yml$
+      always_run: true
+
+
+  - repo: https://github.com/norwoodj/helm-docs
+    rev: "v1.14.2"
+    hooks:
+    - id: helm-docs-built
+      args:
+        - "--chart-search-root=chart"

ctao_dpps_clients-0.0.0/CHANGES.rst

@@ -0,0 +1,11 @@
+DPPS v0.0.0 (2025-02-26)
+------------------------
+
+Initial Release of the Data Processing and Preservation System.
+
+This release integrates
+
+- `Workload Management System v0.1.0 <http://cta-computing.gitlab-pages.cta-observatory.org/dpps/workload/wms/v0.1.0/>`_
+- `Bulk Data Management System v0.1.0 <http://cta-computing.gitlab-pages.cta-observatory.org/dpps/bdms/bdms/v0.1.0/>`_
+
+Deployment is facilitated by docker images and helm charts.

ctao_dpps_clients-0.0.0/Dockerfile

@@ -0,0 +1,61 @@
+FROM harbor.cta-observatory.org/proxy_cache/python:3.12 AS builder
+
+COPY pyproject.toml /tmp/dpps/
+COPY .git /tmp/dpps/.git/
+COPY src /tmp/dpps/src/
+
+RUN python -m pip install build \
+  && python -m build /tmp/dpps --wheel -o /tmp/dist
+
+FROM harbor.cta-observatory.org/proxy_cache/almalinux:9
+
+# TODO: these can be derived from pyproject.toml
+ARG DIRACOS_VERSION="2.50"
+ARG USERID=1000
+ARG GROUPID=1000
+
+ENV DIRAC_DIR="/home/dpps"
+ENV DIRACOS="${DIRAC_DIR}/diracos"
+
+RUN \
+  if getent group ${GROUPID}; then \
+    groupmod --new-name dpps $(getent group ${GROUPID} | cut -d: -f1); \
+  else \
+    groupadd --gid ${GROUPID} dpps; \
+  fi\
+  && adduser --uid ${USERID} --gid dpps -s /bin/bash -d /home/dpps dpps
+
+RUN mkdir -p ${DIRAC_DIR} \
+    && chown -R dpps:dpps ${DIRAC_DIR}
+
+WORKDIR ${DIRAC_DIR}
+
+# Install DIRAC client
+USER dpps
+
+RUN curl -LO https://github.com/DIRACGrid/DIRACOS2/releases/download/${DIRACOS_VERSION}/DIRACOS-Linux-x86_64.sh \
+    && bash DIRACOS-Linux-x86_64.sh -p ${DIRAC_DIR}/diracos \
+    && rm -f DIRACOS-Linux-x86_64.sh
+
+RUN mkdir -p ${DIRAC_DIR}/.globus \
+    && mkdir -p ${DIRACOS}/etc/grid-security/certificates
+
+COPY --from=builder /tmp/dist/ /tmp/dist/
+RUN source ${DIRAC_DIR}/diracos/diracosrc && pip install --no-cache-dir /tmp/dist/ctao*
+
+ENV \
+  CONDA_PREFIX="${DIRACOS}" \
+  MAMBA_ROOT_PREFIX="${DIRACOS}" \
+  CONDOR_CONFIG="${DIRACOS}/etc/condor/condor_config" \
+  DAVIX_DISABLE_REDIRECT_CACHING=1 \
+  DAVIX_USE_LIBCURL=1 \
+  GSETTINGS_SCHEMA_DIR="${DIRACOS}/share/glib-2.0/schemas" \
+  PATH="${DIRACOS}/bin:${DIRACOS}/condabin:${PATH}" \
+  X509_CERT_DIR="${DIRACOS}/etc/grid-security/certificates" \
+  X509_VOMSES="${DIRACOS}/etc/grid-security/vomses" \
+  X509_VOMS_DIR="${DIRACOS}/etc/grid-security/vomsdir" \
+  XML_CATALOG_FILES="file://${DIRACOS}/etc/xml/catalog file:///etc/xml/catalog" \
+  RUCIO_POLICY_PACKAGE="bdms_rucio_policy" \
+  RUCIO_CLIENT_MODE="1"
+
+USER dpps

ctao_dpps_clients-0.0.0/Makefile

@@ -0,0 +1,11 @@
+###
+export CHART_NAME=dpps
+export CHART_LOCATION=chart
+include dpps-aiv-toolkit/Makefile
+
+
+export TEST_ARTIFACTS_PATH ?= $(PWD)
+export TEST_REPORT_CONFIG ?= $(PWD)/config.yml
+
+# for some reason, here the default is different
+export DEV_IMAGE_SUFFIX=clients

ctao_dpps_clients-0.0.0/PKG-INFO

@@ -0,0 +1,36 @@
+Metadata-Version: 2.2
+Name: ctao-dpps-clients
+Version: 0.0.0
+Summary: DPPS python clients package
+Author: The CTAO DPPS team
+Maintainer-email: Maximilian Linhoff <maximilian.linhoff@cta-observatory.org>
+License: BSD-3-Clause
+Project-URL: repository, https://gitlab.cta-observatory.org/cta-computing/dpps/dpps
+Project-URL: documentation, http://cta-computing.gitlab-pages.cta-observatory.org/dpps/dpps/
+Requires-Python: >=3.9
+Description-Content-Type: text/markdown
+Requires-Dist: ctao-wms-clients~=0.1.0rc2
+Requires-Dist: ctao-bdms-clients~=0.1.0rc3
+Provides-Extra: test
+Requires-Dist: pytest; extra == "test"
+Requires-Dist: pytest-cov; extra == "test"
+Requires-Dist: pytest-requirements; extra == "test"
+Provides-Extra: doc
+Requires-Dist: sphinx; extra == "doc"
+Requires-Dist: numpydoc; extra == "doc"
+Requires-Dist: ctao-sphinx-theme; extra == "doc"
+Requires-Dist: myst-parser; extra == "doc"
+Requires-Dist: sphinx-changelog; extra == "doc"
+Provides-Extra: dev
+Requires-Dist: setuptools_scm; extra == "dev"
+Requires-Dist: sphinx-autobuild; extra == "dev"
+
+# Data Processing and Preservation System (DPPS)
+
+The Data Processing and Preservation Systems is one of the major components of CTAO Computing.
+
+It is responsible for transferring and preserving the DL0 data produced by
+[ACADA](https://gitlab.cta-observatory.org/cta-computing/acada/array-control-and-data-acquisition)
+and then processing it to data level DL3.
+
+See [the documentation](http://cta-computing.gitlab-pages.cta-observatory.org/dpps/dpps) for more details.

ctao_dpps_clients-0.0.0/README.md

@@ -0,0 +1,9 @@
+# Data Processing and Preservation System (DPPS)
+
+The Data Processing and Preservation Systems is one of the major components of CTAO Computing.
+
+It is responsible for transferring and preserving the DL0 data produced by
+[ACADA](https://gitlab.cta-observatory.org/cta-computing/acada/array-control-and-data-acquisition)
+and then processing it to data level DL3.
+
+See [the documentation](http://cta-computing.gitlab-pages.cta-observatory.org/dpps/dpps) for more details.

ctao_dpps_clients-0.0.0/aiv-config-dependencies.yml

@@ -0,0 +1,6 @@
+dependencies:
+  - gitlab_path: cta-computing/dpps/bdms/bdms
+    revision: v0.1.0
+
+  - gitlab_path: cta-computing/dpps/workload/wms
+    revision: v0.1.0

ctao_dpps_clients-0.0.0/aiv-config.yml

@@ -0,0 +1,25 @@
+# This is the configuration used both in CI and local Makefile
+
+variables:
+  # used to select requirements
+  DPPS_UC_GROUPS: ALL
+  DPPS_RELEASE: v0.0
+
+  CHART_LOCATION: chart
+  CHART_NAME: dpps
+
+  RELEASE_PLAN_FN: dpps-release-plan/release_development_document/dpps-release-plan.tex
+  TRACEABILITY_CSV_FN: requirements-traceability/DPPS_Requirements_Traceability_Matrix.csv
+
+  APPLICATION_NAME: DPPS
+  APPLICATION_AUTHOR: DPPS Team
+  APPLICATION_AUTHOR_ORGANIZATION: CTAO
+  APPLICATION_VERSION: 0.0.0a0
+
+  DEFAULT_HELM_TEST: name=dpps-pytest
+
+  EXTRA_CONFIG_FILES: aiv-config-dependencies.yml
+
+  # these UCs are executed during project deployment and hence verified by the very completion of the pipeline
+  # TODO: separate in bdms,wms
+  DEPLOYMENT_UCS: DPPS-UC-170-1.2.1,DPPS-UC-170-1.2.2,DPPS-UC-170-1.2.3,DPPS-UC-170-1.2.4,DPPS-UC-170-1.6

ctao_dpps_clients-0.0.0/chart/Chart.yaml

@@ -0,0 +1,33 @@
+# this is a parent helm chart for the DPPS project
+
+apiVersion: v2
+name: dpps
+version: "0.0.0-dev"
+appVersion: "0.0.0-dev"
+description: A Helm chart for the DPPS project
+type: application
+keywords:
+- dpps
+
+maintainers:
+- name: The DPPS Authors
+  email:
+
+dependencies:
+- name: bdms
+  version: v0.1.0
+  repository: oci://harbor.cta-observatory.org/dpps
+
+- name: wms
+  version: v0.1.0
+  repository: oci://harbor.cta-observatory.org/dpps
+
+- name: cvmfs
+  version: v0.1.0
+  condition: cvmfs.enabled
+  repository: oci://harbor.cta-observatory.org/dpps
+
+- name: cert-generator-grid
+  condition: cert-generator-grid.enabled
+  version: v0.2.3
+  repository: oci://harbor.cta-observatory.org/dpps

ctao_dpps_clients-0.0.0/chart/README.md

@@ -0,0 +1,79 @@
+# dpps
+
+![Version: 0.0.0-dev](https://img.shields.io/badge/Version-0.0.0--dev-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: 0.0.0-dev](https://img.shields.io/badge/AppVersion-0.0.0--dev-informational?style=flat-square)
+
+A Helm chart for the DPPS project
+
+## Maintainers
+
+| Name | Email | Url |
+| ---- | ------ | --- |
+| The DPPS Authors |  |  |
+
+## Requirements
+
+| Repository | Name | Version |
+|------------|------|---------|
+| oci://harbor.cta-observatory.org/dpps | bdms | v0.1.0 |
+| oci://harbor.cta-observatory.org/dpps | cert-generator-grid | v0.2.3 |
+| oci://harbor.cta-observatory.org/dpps | cvmfs | v0.1.0 |
+| oci://harbor.cta-observatory.org/dpps | wms | v0.1.0 |
+
+## Values
+
+| Key | Type | Default | Description |
+|-----|------|---------|-------------|
+| bdms.cert-generator-grid.enabled | bool | `true` |  |
+| bdms.configure_test_setup | bool | `true` |  |
+| bdms.database.default | string | `"postgresql://rucio:XcL0xT9FgFgJEc4i3OcQf2DMVKpjIWDGezqcIPmXlM@dpps-postgresql:5432/rucio"` |  |
+| bdms.postgresql.global.postgresql.auth.database | string | `"rucio"` |  |
+| bdms.postgresql.global.postgresql.auth.password | string | `"XcL0xT9FgFgJEc4i3OcQf2DMVKpjIWDGezqcIPmXlM"` |  |
+| bdms.postgresql.global.postgresql.auth.username | string | `"rucio"` |  |
+| bdms.rucio-daemons.config.database.default | string | `"postgresql://rucio:XcL0xT9FgFgJEc4i3OcQf2DMVKpjIWDGezqcIPmXlM@dpps-postgresql:5432/rucio"` |  |
+| bdms.rucio-daemons.conveyorTransferSubmitterCount | int | `1` |  |
+| bdms.rucio-server.authRucioHost | string | `"rucio-server.local"` |  |
+| bdms.rucio-server.config.database.default | string | `"postgresql://rucio:XcL0xT9FgFgJEc4i3OcQf2DMVKpjIWDGezqcIPmXlM@dpps-postgresql:5432/rucio"` |  |
+| bdms.rucio-server.exposeErrorLogs | bool | `false` |  |
+| bdms.rucio-server.ftsRenewal.enabled | bool | `false` |  |
+| bdms.rucio-server.httpd_config.grid_site_enabled | string | `"True"` |  |
+| bdms.rucio-server.ingress.enabled | bool | `true` |  |
+| bdms.rucio-server.ingress.hosts[0] | string | `"rucio-server.local"` |  |
+| bdms.rucio-server.livenessProbe.initialDelaySeconds | int | `40` |  |
+| bdms.rucio-server.livenessProbe.periodSeconds | int | `10` |  |
+| bdms.rucio-server.livenessProbe.successThreshold | int | `1` |  |
+| bdms.rucio-server.livenessProbe.timeoutSeconds | int | `15` |  |
+| bdms.rucio-server.optional_config.RUCIO_CFG_BOOTSTRAP_USERPASS_IDENTITY | string | `"dpps"` |  |
+| bdms.rucio-server.optional_config.RUCIO_CFG_BOOTSTRAP_USERPASS_PWD | string | `"secret"` |  |
+| bdms.rucio-server.optional_config.RUCIO_CFG_BOOTSTRAP_X509_EMAIL | string | `"dpps-test@cta-observatory.org"` |  |
+| bdms.rucio-server.optional_config.RUCIO_CFG_BOOTSTRAP_X509_IDENTITY | string | `"CN=DPPS User"` |  |
+| bdms.rucio-server.optional_config.RUCIO_CFG_COMMON_EXTRACT_SCOPE | string | `"ctao_bdms"` |  |
+| bdms.rucio-server.optional_config.RUCIO_CFG_POLICY_LFN2PFN_ALGORITHM_DEFAULT | string | `"ctao_bdms"` |  |
+| bdms.rucio-server.optional_config.RUCIO_CFG_POLICY_PACKAGE | string | `"bdms_rucio_policy"` |  |
+| bdms.rucio-server.readinessProbe.initialDelaySeconds | int | `40` |  |
+| bdms.rucio-server.readinessProbe.periodSeconds | int | `10` |  |
+| bdms.rucio-server.readinessProbe.successThreshold | int | `1` |  |
+| bdms.rucio-server.readinessProbe.timeoutSeconds | int | `15` |  |
+| bdms.rucio-server.replicaCount | int | `1` |  |
+| bdms.rucio-server.service.name | string | `"https"` |  |
+| bdms.rucio-server.service.port | int | `443` |  |
+| bdms.rucio-server.service.protocol | string | `"TCP"` |  |
+| bdms.rucio-server.service.targetPort | int | `443` |  |
+| bdms.rucio-server.service.type | string | `"ClusterIP"` |  |
+| bdms.rucio-server.useSSL | bool | `true` |  |
+| bdms.safe_to_bootstrap_rucio | bool | `true` |  |
+| cert-generator-grid.enabled | bool | `false` |  |
+| cert-generator-grid.generatePreHooks | bool | `true` |  |
+| cvmfs.enabled | bool | `false` |  |
+| dev.client_image_tag | string | `nil` |  |
+| dev.mount_repo | bool | `true` |  |
+| dev.runAsGroup | int | `1000` |  |
+| dev.runAsUser | int | `1000` |  |
+| dev.run_tests | bool | `true` |  |
+| dev.sleep | bool | `false` |  |
+| dev.start_long_running_client | bool | `false` |  |
+| image.pullPolicy | string | `"IfNotPresent"` |  |
+| image.repository_prefix | string | `"harbor.cta-observatory.org/dpps/dpps"` |  |
+| wms.cert-generator-grid.enabled | bool | `false` |  |
+| wms.rucio.enabled | bool | `true` |  |
+| wms.rucio.rucioConfig | string | `"dpps-bdms-rucio-config"` |  |
+

ctao_dpps_clients-0.0.0/chart/templates/tests/test-pytest.yaml

@@ -0,0 +1,125 @@
+apiVersion: v1
+kind: Pod
+metadata:
+  name: "{{ .Release.Name }}-pytest"
+  labels:
+  {{- include "wms.labels" . | nindent 4 }}
+  {{ if .Values.dev.start_long_running_client }}
+  {{ else }}
+  annotations:
+    "helm.sh/hook": test
+  {{ end }}
+spec:
+  securityContext:
+    runAsUser: {{ .Values.dev.runAsUser }}
+    runAsGroup: {{ .Values.dev.runAsGroup }}
+    fsGroup: {{ .Values.dev.runAsGroup }}
+
+  containers:
+  - name: test
+    image: "{{ .Values.image.repository_prefix }}-clients:{{ .Values.dev.client_image_tag | default .Chart.AppVersion }}"
+    workingDir: /home/dpps/dpps
+
+    command:
+    - bash
+    - -c
+    - |
+      set -xe
+
+      source ${DIRACOS}/diracosrc
+
+      {{ if .Values.dev.mount_repo }}
+      pip install -e .[test]
+      {{ end }}
+
+      mkdir -pv ${DIRACOS}/etc/grid-security/certificates/
+      cp -fv /etc/grid-security/certificates/* ${DIRACOS}/etc/grid-security/certificates/
+      install -D -m 644 -v /opt/user/globus/usercert.pem $HOME/.globus/usercert.pem
+      install -D -m 600 -v /opt/user/globus/userkey.pem $HOME/.globus/userkey.pem
+      install -D -m 600 /opt/user/ssh/diracuser_sshkey $HOME/.ssh/diracuser_sshkey
+      ls -lR ${DIRACOS}/etc/grid-security
+      ls -lR ${HOME}/.globus/
+
+      dirac-proxy-init -g dpps_group --nocs
+      dirac-configure -C dips://dirac-server:9135/Configuration/Server -S DPPS-Tests
+
+      {{ if .Values.dev.run_tests }}
+      python3 -m pytest \
+        -svv \
+        -o cache_dir=$PWD/.pytest-cache \
+        --cov \
+        --cov-report=xml:/tmp/coverage.xml \
+        --junitxml=/tmp/report.xml \
+        --color=yes \
+        --log-cli-level=INFO
+
+      curl -T /tmp/coverage.xml http://testkit:8000/coverage.xml
+      curl -T /tmp/report.xml http://testkit:8000/report.xml
+      {{ end }}
+
+      {{ if .Values.dev.sleep }}
+      sleep infinity
+      {{ end }}
+
+
+    volumeMounts:
+    {{ if .Values.dev.mount_repo }}
+    - name: repo
+      mountPath: /home/dpps/dpps
+    {{ end }}
+    - name: cafile
+      subPath: ca.pem
+      mountPath: /etc/grid-security/certificates/dpps_test_ca.pem
+    - name: cafile
+      subPath: ca.pem
+      mountPath: /etc/grid-security/certificates/74df993b.0
+    - name: cafile
+      subPath: dpps_test_ca.crl.r0
+      mountPath: /etc/grid-security/certificates/74df993b.r0
+    - name: cafile
+      subPath: dpps_test_ca.crl.r0
+      mountPath: /etc/grid-security/certificates/dpps_test_ca.crl.r0
+    - name: cafile
+      subPath: ca.pem
+      mountPath: /etc/grid-security/ca.pem
+    # this unusual location is needed not to causee somewhat unpredictable behavior due to conflict with mounted home
+    - name: dppsuser-certkey-400
+      mountPath: /opt/user/globus/userkey.pem
+      subPath: dppsuser.key.pem
+    - name: dppsuser-certkey-600
+      mountPath: /opt/user/globus/usercert.pem
+      subPath: dppsuser.pem
+    - name: diracuser-sshkey
+      mountPath: /opt/user/ssh/diracuser_sshkey
+      subPath: ssh-diracuser_sshkey
+    - name: rucio-config
+      mountPath: /opt/rucio/etc
+
+  volumes:
+  {{ if .Values.dev.mount_repo }}
+  - name: repo
+    hostPath:
+      path: /repo
+      type: Directory
+  {{ end }}
+  - name: cafile
+    secret:
+      defaultMode: 420
+      secretName: {{ template "certprefix" . }}-server-cafile
+  - name: dppsuser-certkey-600
+    secret:
+      defaultMode: 0600
+      secretName: {{ template "certprefix" . }}-dppsuser-certkey
+  - name: dppsuser-certkey-400
+    secret:
+      defaultMode: 0400
+      secretName: {{ template "certprefix" . }}-dppsuser-certkey
+  - name: diracuser-sshkey
+    secret:
+      secretName: {{ include "wms.fullname" . }}-diracuser-sshkey
+      defaultMode: 420
+  - name: rucio-config
+    configMap:
+      name: {{ .Release.Name }}-bdms-rucio-config
+
+  restartPolicy: Never