Wilfred Spiegelenburg created YUNIKORN-997:
----------------------------------------------
Summary: assess Kubernetes role requirement
Key: YUNIKORN-997
URL: https://issues.apache.org/jira/browse/YUNIKORN-997
Project: Apache YuniKorn
Issue Type: Improvement
Components: shim - kubernetes
Reporter: Wilfred Spiegelenburg
Currently we run with cluster-admin privileges. That is really broad.
Kubernetes has more limited roles called {{system:kube-scheduler}} and
{{{}system:volume-scheduler{}}}. Those roles are assigned to the default
scheduler.
These roles will not fit for us as we do a little more than the default
scheduler when it comes down to placeholder pods.
We need to assess if we can drop as many privileges as possible and not run
with cluster admin role.
--
This message was sent by Atlassian Jira
(v8.20.1#820001)
---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscr...@yunikorn.apache.org
For additional commands, e-mail: issues-h...@yunikorn.apache.org
