Re: [kubernetes-users] How kubectl be authorized ?

2017-12-19 Thread yingkityuen
Cert authen will grant full access to the user. From: https://cloud.google.com/kubernetes-engine/docs/how-to/iam-integration --- Using legacy cluster certificate or user credentials Kubernetes Engine clusters also accept both the cluster certificate and a username with password. Requests with e

Re: [kubernetes-users] How kubectl be authorized ?

2017-12-19 Thread yingkityuen
On Tuesday, July 11, 2017 at 1:25:16 PM UTC+8, Shafreeck Sea wrote: > I have read about rbac, it does not solve my confusion. I use Certificate to > authenticate the kubectl user(maybe as foo),  I do not assign any role to the > user, as expected, it should be denied when accesses the api server

Re: [kubernetes-users] Issues to create PersistentVolumeClaim in linux env

2017-12-19 Thread
Can you paste more details about your PersistentVolume? On Mon, Dec 18, 2017 at 6:25 PM, wrote: > Could you please help me to solve this issue, it works fine in minicube > but fails to mount PVC in linux: > bash-4.2$ kubectl describe pods/coordinator-1030109887-ptn6l > Name: coordinato

Re: [kubernetes-users] why can i see the process that in a container in the host?

2017-12-19 Thread
That is what a container does. PID namespaces, unlike most others, nest. On Dec 19, 2017 5:04 AM, wrote: > hi all, > > i got confused that when i create a pod like mysql, i can see the mysqld > process in the host, any one can tell me why that happens? > thanks. > > -- > You received this messa

[kubernetes-users] Pod priority/preemption and automatic rescheduling or priority without preemption?

2017-12-19 Thread franknleslie
I am evaluating Kubernetes for adhoc task queueing / execution and have one (final?) scenario that I need to resolve for my justification to the product management team. The general system is this: users have a set of tools which they can use to perform analysis or parsing on files. Each tool

Re: [kubernetes-users] why can i see the process that in a container in the host?

2017-12-19 Thread Rodrigo Campos
It's about docker. When you run a docker container you are really running a process (with cgroups to limit cpu, namespaces to isolate visibility, etc. But it's just a process) On Tuesday, December 19, 2017, wrote: > hi all, > > i got confused that when i create a pod like mysql, i can see the my

[kubernetes-users] why can i see the process that in a container in the host?

2017-12-19 Thread shenxg13
hi all, i got confused that when i create a pod like mysql, i can see the mysqld process in the host, any one can tell me why that happens? thanks. -- You received this message because you are subscribed to the Google Groups "Kubernetes user discussion and Q&A" group. To unsubscribe from this