Kubespawner: permissions for hub serviceaccount

[Andrea Zonca]

Hi,
What are the (minimal) permissions I should setup for the serviceaccount associated with the hub?
I'm deploying zero-to-jupyterhub on custom k8s.
Copy&Paste kubectl snippet much appreciated.
Thanks,
Andrea

[Yuvi Panda]

heya!

0.5 (which I should have a beta of by tomorrow!) has better support for RBAC.

You can see the rules it sets up here:
https://github.com/jupyterhub/zero-to-jupyterhub-k8s/blob/master/jupyterhub/templates/hub/rbac.yaml

if you're setting it up manually, the same should work. Note that you
have to turn off the pre-puller for z2jh to work with RBAC tho.

> --
> You received this message because you are subscribed to the Google Groups "Project Jupyter" group.
> To unsubscribe from this group and stop receiving emails from it, send an email to jupyter+u...@googlegroups.com.
> To post to this group, send email to jup...@googlegroups.com.
> To view this discussion on the web visit https://groups.google.com/d/msgid/jupyter/b7a1019c-5b3e-407a-9d4a-fa2d0c967045%40googlegroups.com.
> For more options, visit https://groups.google.com/d/optout.



--
Yuvi Panda T
http://yuvi.in/blog

[Andrea Zonca]

I'm already using master ;)

but didn't notice that setting...

Thanks!

ps I discovered the issue on the pre-puller the hard way already...