Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[autoscaler] Expose autoscaler container security context. #752

Conversation

DmitriGekhtman
Copy link
Collaborator

Signed-off-by: Dmitri Gekhtman dmitri.m.gekhtman@gmail.com

Why are these changes needed?

Allows setting the autoscaler container's security context.

Related issue number

Checks

  • I've made sure the tests are passing.
  • Testing Strategy
    • Unit tests
    • Manual tests
    • This PR is not tested :(

Signed-off-by: Dmitri Gekhtman <dmitri.m.gekhtman@gmail.com>
Signed-off-by: Dmitri Gekhtman <dmitri.m.gekhtman@gmail.com>
Signed-off-by: Dmitri Gekhtman <dmitri.m.gekhtman@gmail.com>
@DmitriGekhtman
Copy link
Collaborator Author

cc @juliusvonkohout

Signed-off-by: Dmitri Gekhtman <dmitri.m.gekhtman@gmail.com>
Copy link
Member

@kevin85421 kevin85421 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thank @DmitriGekhtman for this contribution! We should create a namespace with restricted policies to test it. Follow the instructions in https://github.com/ray-project/kuberay/pull/750/files.

ray-operator/controllers/ray/common/pod_test.go Outdated Show resolved Hide resolved
ray-operator/controllers/ray/common/pod_test.go Outdated Show resolved Hide resolved
Signed-off-by: Dmitri Gekhtman <dmitri.m.gekhtman@gmail.com>
@DmitriGekhtman
Copy link
Collaborator Author

TODO: Try it in a namespace with restricted policies.

@DmitriGekhtman
Copy link
Collaborator Author

@kevin85421 I just tested this with your securityContext instructions and it worked exactly as expected -- I was able to deploy a cluster and trigger autoscaling.

Signed-off-by: Dmitri Gekhtman <dmitri.m.gekhtman@gmail.com>
Copy link
Member

@kevin85421 kevin85421 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@DmitriGekhtman DmitriGekhtman merged commit 87ca10a into ray-project:master Dec 2, 2022
lowang-bh pushed a commit to lowang-bh/kuberay that referenced this pull request Sep 24, 2023
…ct#752)

Expose configuration for the autoscaler container's security context.

Signed-off-by: Dmitri Gekhtman <dmitri.m.gekhtman@gmail.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants