search

OSC / osc-ood-config

Configuration for OSC's OnDemand Deployments
MIT License
2 stars 1 forks source link

Allow job-pod-reaper to see OnDemand Kubernetes namespaces #144

Closed treydock closed 3 years ago

johrstrom commented 3 years ago

This files is meant for bootstrapping users. Shouldn't this be with the system ymls held in code osu edu?

treydock commented 3 years ago

No, because it's done on a per-namespace basis. If we do it for the central config then we have to authorize job-pod-reaper on every namespace which I don't want to do. I want this RoleBinding added to every OnDemand namespace, and this is the only place to do that.

treydock commented 3 years ago

In case your curious, this is the RBAC deployed centrally: https://github.com/OSC/job-pod-reaper/blob/main/install/namespace-rbac.yaml