Open johnml1135 opened 2 months ago
Our conclusion regarding service accounts given we only are able to have two (?) is that we'd have one service account for production serval jobs and another for QA serval as well as onboarding. Is that correct, @ddaspit? I'm happy to go ahead and make this happen. I also know @mshannon-sil was offering to set up service accounts.
@Enkidu93 Yes, that is what we want.
I'm seeing two service accounts already there - serval
and silnlp
. Did you @johnml1135 or @mshannon-sil create these for production and QA/onboarding? If so, should we rename them to make their intended scopes clear?
I think John set those up, but it looks like they've never been used, so we can go ahead and rename them. If you need administrator access to rename them/get credentials, I can take care of that.
OK, sounds good! I have admin access, so I should be good to go - thank you!
Ideas for naming? I'll do serval-production
for the one, but what about the other since its intended use is twofold? testing
? research
? serval-testing-and-onboarding
? internal
?
I'm in favor of serval-testing-and-onboarding
since it's most specific/accurate, and none of the general names quite capture the purpose.
Partial duplicate of #351
S3 bucket min access creds for docker-compose ClearML service agent creds