ccu, Administrators
684
edits
Changes
Jump to navigation
Jump to search
m
→User namespace, pod security and quotas
* Namespace: user-firstname-lastname
That means you replace all '.'s in your login ID with a '-' to obtain the username, and prepend "user-" to obtain the namespace.
Thus, you should set your default namespace in the kubeconfig accordingly, and perhaps have to update pod configurations. For security reasons, containers are forced to run with your own user id and a user group id of "10000". These will also be the ids used to create files and directories, and decide the permissions you have on the file system. The pod security policy which is active for your namespace will automatically fill in this data. Note that the security policy for pods is very restrictive for now to detect all problematic cases. In particular, you can not switch to root inside containers anymore. Please inform me if security policies disrupt your usual workflow so that we can work something out.
