RHOAIENG-57679: remove rbac step

Author: pawelpaszki

demo-notebooks/guided-demos/6_rayjob_checkpointing_example.ipynb

@@ -25,14 +25,14 @@
     },
     {
       "cell_type": "code",
+      "execution_count": null,
       "metadata": {},
+      "outputs": [],
       "source": [
         "from codeflare_sdk import RayJob, ManagedClusterConfig, set_api_client, get_cluster\n",
         "from kube_authkit import AuthConfig, get_k8s_client\n",
         "import time"
-      ],
-      "execution_count": null,
-      "outputs": []
+      ]
     },
     {
       "cell_type": "markdown",
@@ -43,7 +43,9 @@
     },
     {
       "cell_type": "code",
+      "execution_count": null,
       "metadata": {},
+      "outputs": [],
       "source": [
         "import urllib3\n",
         "\n",
@@ -83,9 +85,7 @@
         "JOB_NAME = \"checkpointing-job\"\n",
         "# Must match metadata.name of a LocalQueue in NAMESPACE (create per OpenShift Kueue docs).\n",
         "LOCAL_QUEUE = \"default\""
-      ],
-      "execution_count": null,
-      "outputs": []
+      ]
     },
     {
       "cell_type": "markdown",
@@ -105,17 +105,17 @@
     },
     {
       "cell_type": "code",
+      "execution_count": null,
       "metadata": {},
+      "outputs": [],
       "source": [
         "# Optional: verify Kueue objects exist (cluster admin / user with read access)\n",
         "# !oc get resourceflavor.kueue.x-k8s.io\n",
         "# !oc get clusterqueue.kueue.x-k8s.io\n",
         "# !oc get localqueue.kueue.x-k8s.io -n $NAMESPACE\n",
         "\n",
         "print(f\"Namespace: {NAMESPACE!r}, RayJob name: {JOB_NAME!r}, LocalQueue: {LOCAL_QUEUE!r}\")"
-      ],
-      "execution_count": null,
-      "outputs": []
+      ]
     },
     {
       "cell_type": "markdown",
@@ -126,7 +126,9 @@
     },
     {
       "cell_type": "code",
+      "execution_count": null,
       "metadata": {},
+      "outputs": [],
       "source": [
         "# Set your AWS credentials\n",
         "# WARNING: Do not commit credentials to version control. For production,\n",
@@ -142,23 +144,6 @@
         "# AWS_CREDENTIALS[\"AWS_SESSION_TOKEN\"] = \"your-session-token\"\n",
         "\n",
         "print(f\"Using bucket: {AWS_CREDENTIALS['AWS_S3_BUCKET']}\")"
-      ],
-      "execution_count": null,
-      "outputs": []
-    },
-    {
-      "cell_type": "markdown",
-      "metadata": {},
-      "source": [
-        "## Grant workbench permissions (one-time, admin)\n",
-        "\n",
-        "To create RayJob resources from a workbench, the workbench service account typically needs elevated RBAC in the project. Run **once** with a user that has `cluster-admin` or sufficient privileges (replace `your-namespace`):\n",
-        "\n",
-        "```bash\n",
-        "oc adm policy add-role-to-user admin \\\n",
-        "  system:serviceaccount:your-namespace:your-namespace-wb \\\n",
-        "  -n your-namespace\n",
-        "```"
       ]
     },
     {
@@ -170,7 +155,9 @@
     },
     {
       "cell_type": "code",
+      "execution_count": null,
       "metadata": {},
+      "outputs": [],
       "source": [
         "managed = ManagedClusterConfig(\n",
         "    num_workers=2,\n",
@@ -206,9 +193,7 @@
         ")\n",
         "print(f\"RayCluster name (when assigned): {job.cluster_name}\")\n",
         "print(\"Watch logs for: NO CHECKPOINT FOUND - Starting fresh\")"
-      ],
-      "execution_count": null,
-      "outputs": []
+      ]
     },
     {
       "cell_type": "markdown",
@@ -221,7 +206,9 @@
     },
     {
       "cell_type": "code",
+      "execution_count": null,
       "metadata": {},
+      "outputs": [],
       "source": [
         "print(job.status())\n",
         "\n",
@@ -244,9 +231,7 @@
         "print(\n",
         "    \"Wait for at least one full epoch and a checkpoint to S3 before running the suspend cell.\"\n",
         ")"
-      ],
-      "execution_count": null,
-      "outputs": []
+      ]
     },
     {
       "cell_type": "markdown",
@@ -261,7 +246,9 @@
     },
     {
       "cell_type": "code",
+      "execution_count": null,
       "metadata": {},
+      "outputs": [],
       "source": [
         "print(\"=\" * 60)\n",
         "print(\"SUSPENDING RayJob (checkpoint demo — not deleting the RayJob CR)\")\n",
@@ -270,9 +257,7 @@
         "\n",
         "job.stop()\n",
         "print(\"Stop requested; poll job.status() until the RayJob reports suspended / non-running.\")"
-      ],
-      "execution_count": null,
-      "outputs": []
+      ]
     },
     {
       "cell_type": "markdown",
@@ -285,7 +270,9 @@
     },
     {
       "cell_type": "code",
+      "execution_count": null,
       "metadata": {},
+      "outputs": [],
       "source": [
         "print(\"=\" * 60)\n",
         "print(\"RESUMING RayJob after suspend\")\n",
@@ -295,9 +282,7 @@
         "job.resubmit()\n",
         "time.sleep(10)\n",
         "print(job.status())"
-      ],
-      "execution_count": null,
-      "outputs": []
+      ]
     },
     {
       "cell_type": "markdown",
@@ -317,7 +302,9 @@
     },
     {
       "cell_type": "code",
+      "execution_count": null,
       "metadata": {},
+      "outputs": [],
       "source": [
         "print(job.status())\n",
         "try:\n",
@@ -326,9 +313,7 @@
         "except Exception as e:\n",
         "    print(f\"Could not resolve cluster yet: {e}\")\n",
         "print(\"Check Jobs tab for: RESUMING FROM CHECKPOINT - Starting at epoch N\")"
-      ],
-      "execution_count": null,
-      "outputs": []
+      ]
     },
     {
       "cell_type": "markdown",
@@ -341,7 +326,9 @@
     },
     {
       "cell_type": "code",
+      "execution_count": null,
       "metadata": {},
+      "outputs": [],
       "source": [
         "print(\"Cleaning up...\")\n",
         "cluster_name = job.cluster_name\n",
@@ -357,18 +344,16 @@
         "    pass\n",
         "\n",
         "print(\"Cleanup attempted (RayJob delete; cluster.down if RayCluster still exists).\")"
-      ],
-      "execution_count": null,
-      "outputs": []
+      ]
     },
     {
       "cell_type": "code",
+      "execution_count": null,
       "metadata": {},
+      "outputs": [],
       "source": [
         "# No explicit logout needed - authentication is managed automatically by kube-authkit"
-      ],
-      "execution_count": null,
-      "outputs": []
+      ]
     }
   ],
   "metadata": {
@@ -392,4 +377,4 @@
   },
   "nbformat": 4,
   "nbformat_minor": 2
-}
+}