Changes

Jump to navigation Jump to search

CCU:New GPU Cluster

253 bytes removed, 4 years ago
m
User namespace, pod security and quotas
That means you replace all '.'s in your login ID with a '-' to obtain the username, and prepend "user-" to obtain the namespace.
Thus, you should set your default namespace in the kubeconfig accordingly, and perhaps have to update pod configurations. For security reasons, containers are forced to run with your own user id and a group id of "10000". These will also be the ids used to create files and directories, and decide the permissions you have on the file system. The pod security policy which is active for your namespace will automatically fill in this data. Note that the security policy for pods is very a bit more restrictive for now as before to detect all problematic cases. In particular, you can not switch to root inside containers anymore. Please inform me if security policies disrupt your usual workflow so that we can work something out. Also, whenever you feel that you should be able to do a certain thing but are forbidden to do it, please ask if this is intended.
Finally, there is now a mechanism in place to set resource quotas for individual users. The preset is quite generous at the moment since we have plenty of resources, but if you believe your account is too limited, please contact meus.
=== Persistent volume management (or lack thereof) ===

Navigation menu