Skip to content

Commit 39fa174

Browse files
sambucolevski
authored andcommitted
Update 50-remote.md
comments about priority class and the service account, tied to SwissDataScienceCenter/amalthea#1088
1 parent e69f270 commit 39fa174

1 file changed

Lines changed: 3 additions & 77 deletions

File tree

docs/docs/20-admins/30-operation/50-remote.md

Lines changed: 3 additions & 77 deletions
Original file line numberDiff line numberDiff line change
@@ -63,12 +63,6 @@ This will be the priority class(es) we can reference when defining quota require
6363
6464
We recommend to create at least one dedicated priority class for the user sessions.
6565
66-
Here as an example on how to create one, adapt as required:
67-
68-
- ```bash
69-
kubectl create priorityclass renku-user-sessions-priority --value=1000 --description="default priority for renku sessions"
70-
```
71-
7266
### Storage classes
7367
7468
#### CSI-driver with automatic provisioning support on your cluster
@@ -91,76 +85,7 @@ User session scheduling is based on label and taints to select nodes where to ru
9185
## Remote Connection for RenkuLab Services
9286

9387
- [ ] Dedicated **Namespace** for the user sessions (for example `renku-user-sessions`)
94-
- [ ] Dedicated **ServiceAccount** (for example `renku-session-manager`) with the following rights
95-
96-
```yaml
97-
apiVersion: rbac.authorization.k8s.io/v1
98-
kind: Role
99-
metadata:
100-
name: renku-session-manager
101-
namespace: renku-user-sessions
102-
rules:
103-
- apiGroups:
104-
- ""
105-
resources:
106-
- pods
107-
- pods/log
108-
- services
109-
- endpoints
110-
- secrets
111-
- priorityclasses
112-
- resourcequotas
113-
verbs:
114-
- get
115-
- list
116-
- watch
117-
- apiGroups:
118-
- ""
119-
resources:
120-
- pods
121-
- secrets
122-
verbs:
123-
- delete
124-
- apiGroups:
125-
- apps
126-
resources:
127-
- statefulsets
128-
verbs:
129-
- get
130-
- list
131-
- watch
132-
- patch
133-
- apiGroups:
134-
- ""
135-
resources:
136-
- secrets
137-
- resourcequotas
138-
verbs:
139-
- create
140-
- update
141-
- delete
142-
- patch
143-
- apiGroups:
144-
- scheduling.k8s.io
145-
resources:
146-
- priorityclasses
147-
verbs:
148-
- get
149-
- list
150-
- watch
151-
- apiGroups:
152-
- amalthea.dev
153-
resources:
154-
- amaltheasessions
155-
verbs:
156-
- create
157-
- update
158-
- delete
159-
- patch
160-
- list
161-
- get
162-
- watch
163-
```
88+
- [ ] Dedicated **ServiceAccount** (for example `renku-session-manager`)
16489

16590
## Deploy the User Session Operator (AmaltheaSession)
16691

@@ -171,13 +96,14 @@ User session scheduling is based on label and taints to select nodes where to ru
17196
helm repo update
17297
```
17398

174-
- [ ] User session operator in the `renku-user-sessions` dedicated namespace:
99+
- [ ] User session operator in the `renku-user-sessions` dedicated namespace, with the default priority class and remote service account:
175100

176101
```bash
177102
helm install \
178103
--generate-name \
179104
--create-namespace \
180105
--namespace renku-user-sessions \
106+
--set-json='deploy.priorityClass=true,deploy.remoteServiceAccount=true' \
181107
renku/amalthea-sessions
182108
```
183109

0 commit comments

Comments
 (0)