cloud-native-robotz-hackathon / infrastructure

0 stars 0 forks source link

RBAC per Team - servingruntimes.serving.kserve.io is forbidden: User "team-3" cannot list resource "servingruntimes" in API group "serving.kserve.io" in the namespace "team-3-ai" #41

Open rbo opened 2 weeks ago

rbo commented 2 weeks ago

image

At the Workbench overview page...

API Request: https://rhods-dashboard-redhat-ods-applications.apps.cluster-v2n9p.v2n9p.sandbox1923.opentlc.com/api/k8s/apis/serving.kserve.io/v1alpha1/namespaces/team-3-ai/servingruntimes?labelSelector=opendatahub.io%2Fdashboard%3Dtrue

Response;

{"kind":"Status","apiVersion":"v1","metadata":{},"status":"Failure","message":"servingruntimes.serving.kserve.io is forbidden: User \"team-3\" cannot list resource \"servingruntimes\" in API group \"serving.kserve.io\" in the namespace \"team-3-ai\"","reason":"Forbidden","details":{"group":"serving.kserve.io","kind":"servingruntimes"},"code":403}
rbo commented 2 weeks ago

@nexus-Six will be fixed soon :-)

rbo commented 2 weeks ago

kserve is disabled: https://github.com/rhpds/agnosticv/blob/master/sandboxes-gpte/CLOUD_NATIVE_ROBOT/common.yaml#L109

rbo commented 2 weeks ago
1 error occurred:
* customresourcedefinitions.apiextensions.k8s.io "servicemeshcontrolplanes.maistra.io" not found

https://kserve.github.io/website/latest/

rbo commented 2 weeks ago
$ oc explain DataScienceCluster.spec.components
...
  kserve    <Object>
    Kserve component configuration. Require OpenShift Serverless and OpenShift
    Service Mesh Operators to be installed before enable component Does not
    support enabled ModelMeshServing at the same time

  modelmeshserving  <Object>
    ModelMeshServing component configuration. Does not support enabled Kserve at
    the same time

Both is removed...

We have to enable

    modelmeshserving:
      managementState: Managed