Skip to content

Commit

Permalink
Added ConfigMap for nnf-dm-worker's sshd_config
Browse files Browse the repository at this point in the history
There was no way to adjust MaxStartups without spinning a new image.
This allows for a site-specific configuration, if needed.

Signed-off-by: Blake Devcich <blake.devcich@hpe.com>
  • Loading branch information
bdevcich committed Sep 4, 2024
1 parent a8f6e90 commit 4c51e6c
Show file tree
Hide file tree
Showing 3 changed files with 26 additions and 0 deletions.
1 change: 1 addition & 0 deletions config/manager/kustomization.yaml
Original file line number Diff line number Diff line change
@@ -1,5 +1,6 @@
resources:
- manager.yaml
- worker-sshd-config.yaml

generatorOptions:
disableNameSuffixHash: true
Expand Down
8 changes: 8 additions & 0 deletions config/manager/manager.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -82,6 +82,10 @@ spec:
privileged: true
capabilities:
add: ['SETUID', 'SETGID', 'MKNOD']
volumeMounts:
- name: worker-config
mountPath: /etc/ssh/sshd_config
subPath: sshd_config
- name: manager
command:
- /manager
Expand All @@ -94,3 +98,7 @@ spec:
valueFrom:
fieldRef:
fieldPath: spec.nodeName
volumes:
- name: worker-config
configMap:
name: nnf-dm-worker-config
17 changes: 17 additions & 0 deletions config/manager/worker-sshd-config.yaml
Original file line number Diff line number Diff line change
@@ -0,0 +1,17 @@
apiVersion: v1
kind: ConfigMap
metadata:
name: worker-config
data:
sshd_config: |
Include /etc/ssh/sshd_config.d/*.conf
Port 2222
StrictModes no
MaxSessions 4096
MaxStartups 4096
ChallengeResponseAuthentication no
UsePAM yes
X11Forwarding yes
PrintMotd no
AcceptEnv LANG LC_*
Subsystem sftp /usr/lib/openssh/sftp-server

0 comments on commit 4c51e6c

Please sign in to comment.