You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
We should probably do something similar for the GPU container. Otherwise I think users might have to override the securityContext in the deployment so as to avoid setting user id and group id.
The text was updated successfully, but these errors were encountered:
* This is a replacement for shelling out to GAM.
* Import all the existing groups to YAML files.
* Get rid of the old text files and GAM code
* Only import members for groups that already defined in GitHub
* We don't want to be the ones putting people's emails into GitHub
* As part of the migration we will ask members of groups not
currently being auto-sync'd to open up PRs to add themselves
* We will then enable AutoSync for all groups.
* We import stubs for all Groups but disable auto-sync; this way
we can start asking people to submit PRs to join the group before
we turn on the sync.
* Support reading the OAuth2 credential from GCS
* Add a Makefile to make it easy to run the commands.
* Use a content hash to detect when files have changed and determine when to resync.
* Also periodically force a resync so if there is any drift due to changes
made outside the system they are reverted.
Related to kubeflow/internal-acls#365 auto sync the Google groups
Co-authored-by: Jeremy Lewi <jlewi@google.com>
In the CPU container we create a user id and group id for user 1000 here
https://github.com/kubeflow/kubeflow/blob/master/components/k8s-model-server/images/Dockerfile.cpu#L53
We set that userid and groupid as part of the deployment here
https://github.com/kubeflow/kubeflow/blob/master/kubeflow/tf-serving/tf-serving.libsonnet#L143
We should probably do something similar for the GPU container. Otherwise I think users might have to override the securityContext in the deployment so as to avoid setting user id and group id.
The text was updated successfully, but these errors were encountered: