Gross hack

scheduler/src/cook/kubernetes/api.clj

@@ -1581,7 +1581,15 @@
         (when use-checkpoint-injection?
           (let [{:keys [command]} checkpoint-container
                 container (V1Container.)
-                resources (V1ResourceRequirements.)]
+                resources (V1ResourceRequirements.)
+                ; Gross hack becuase init containers are running in the wrong order, fetch the tickets early.
+                ticket-volumemount
+                (doto (V1VolumeMount.)
+                  (.setName "kerberos-ticket-volume")
+                  (.setMountPath "/var/secret")
+                  (.readOnly true))
+                ]
+
             ; container
             (.setName container cook-container-name-for-checkpoint-injection)
             (.setImage container image)
@@ -1590,7 +1598,8 @@
             (.setWorkingDir container init-container-workdir)
             (.setEnv container main-env-vars)
             (.setVolumeMounts container (filterv some? (concat [(init-container-workdir-volume-mount-fn false)
-                                                                (scratch-space-volume-mount-fn false)]
+                                                                (scratch-space-volume-mount-fn false)
+                                                                ticket-volumemount]
                                                                init-container-checkpoint-volume-mounts)))
             (set-mem-cpu-resources resources total-memory-request total-memory-limit total-cpu-request total-cpu-limit)
             (.setResources container resources)