search

substratusai / runbooks

Finetune LLMs on K8s by using Runbooks
https://www.substratus.ai
Other
168 stars 14 forks source link

Should SCI clean up KSA <=> IAM principal bindings on namespace deletion? #179

Open brandonjbjelland opened 1 year ago

brandonjbjelland commented 1 year ago

Context: https://github.com/substratusai/substratus/pull/171#discussion_r1290099399

samos123 commented 1 year ago

GCP does not seem to have an atomatic way to add or remove a specific principal binding to a specific role. So updates should be kept to a minimum. There is a risk of overwriting someones IAM policy incorrect whenever we add or remove IAM policy bindings on GCP.