Peter Bacsko and I have been working on an enhancement to our user and group handling as part of the user quota design that was shared earlier. We have come up with a design that will allow us to retrieve user details, including groups, from the Kubernetes authentication information.
The user information is passed onto YuniKorn as an annotation on the pod. This will replace the current user label that can be added to a pod. The new design should also improve the content and reliability of the user information. Feedback and comment welcome, Wilfred [1] https://docs.google.com/document/d/1HTY1s4k3wascg3GQqu6-ewoXCl_nO84gLAtzjSxnFSQ/edit?usp=sharing
