[Feature]: Allow external RBAC configuration/dropping bootstrap-only RBAC permissions
维护者通常 1 天内回复
还没有人认领这个 Issue。
评估
调研方向
The payload names no files or tests, so the first step is locating where the operator creates its own RBAC objects at startup in the Go code. The issue asks for an opt-out toggle or env var, but the maintainers have not replied yet and the design is undecided, so agree on the approach in the thread before writing code. Done means RBAC management can be skipped without the operator crashing when it lacks permissions.
由索引模型根据 Issue 内容生成。
描述
👋🏻
We've been looking at using gpu-operator to simplify some of our GPU infrastructure (and get rid of a couple of pain points at the same time!) - however, and, this might just be an us-problem: at $DAYJOB, we prefer to manage RBAC configurations ourselves/explicitly (i.e., have our own manifests in our gitops repo).
We looked into having our own ClusterRole/ClusterRoleBindings created and dropping any permissions that were unnecessary in our infra (or too broad and not required if the operator no longer needed them to bootstrap itself), but the operator currently doesn't expose a way to skip trying to manage its RBAC configs.
(i.e., we tried to do this, and were blocked by the operator crashing when it unconditionally tried to manage RBAC and whatnot on launch without the necessary permissions to do so :p)
As far as I can tell, there's no way to skip this code atm, so I'm totally happy to give implementing a feature toggle/env var/whatever a shot as long as y'all don't think this isn't a silly idea...but I figured y'all would want an issue/feature request first before talking about PRs/implementation :D
- 主要语言
- Go
- 星标
- 2.9k
- 派生
- 582
- 平均合并
- 2 天 1 小时
- 30 天内合并 PR
- 61
环境准备
- 没有 Dockerfile 或 Docker Compose 文件
- 有 Pull Request 模板
- 阅读贡献指南
从这里开始
- 先读完整个 Issue，再读项目的贡献指南。
- 在 Issue 下留言说明你要接手 —— 这能避免两个人做同样的事。
- Fork 仓库，在一个分支上完成修改。
- 提交 Pull Request，并在描述里引用这个 Issue 编号。
NVIDIA/gpu-operator 的其他 Issue
-
[Bug]: dcgm-exporter no longer gets hostNetwork when a host DCGM is set through dcgmExporter.env可能已有人在做 @blacksoxx 于 6 天前认领。 未关闭
难度 2/5 1-3 小时 新手友好度 64/100
NVIDIA/gpu-operator#3091 ·
维护者通常 1 天内回复
-
feature lifecycle/frozen needs-triage
难度 2/5 1-3 小时 新手友好度 68/100
NVIDIA/gpu-operator#3074 · 2 条评论 ·
维护者通常 1 天内回复
-
[Bug]: GPUCluster common name label breaks DRA validator selector可能已有人在做 @ajavanma 于 33 天前认领。 未关闭
难度 2/5 1-3 小时 新手友好度 88/100
NVIDIA/gpu-operator#2955 · 1 条评论 ·
维护者通常 1 天内回复
-
[Bug]: Precompiled node pools drop kernels that sanitize to the same name可能已有人在做 @SebTardif 于 5 天前认领。 未关闭
难度 2/5 1-3 小时 新手友好度 20/100
NVIDIA/gpu-operator#3098 ·
维护者通常 1 天内回复
-
[Bug]: ClusterPolicy reconcile panics when a DaemonSet has no annotations可能已有人在做 @SebTardif 于 5 天前认领。 未关闭
难度 2/5 1-3 小时 新手友好度 25/100
NVIDIA/gpu-operator#3096 · 3 条评论 ·
维护者通常 1 天内回复
查看 NVIDIA/gpu-operator 的全部 Issue
相似的 Issue
-
fix(handlers): explicitly set Content-Type header in static Index handler可能已有人在做 @kage-zero 今天认领。 未关闭
难度 1/5 1 小时以内 新手友好度 85/100
维护者通常 1 天内回复
-
Quick Open: restore dependency-directory exclusions in filesystem fallback可能已有人在做 关联的 PR 仍在进行中或已合并。 未关闭
难度 2/5 1-3 小时 新手友好度 82/100
eugenioenko/ttt#1206 ·
维护者通常 1 天内回复
-
难度 2/5 1-3 小时 新手友好度 68/100
open-policy-agent/opa#9426 ·
维护者通常 1 天内回复
-
难度 2/5 1-3 小时 新手友好度 72/100
rorkai/App-Store-Connect-CLI#3192 ·
维护者通常 1 天内回复
-
t:urlDecodeUni does not map U+3002 and U+FF61 to a dot, unlike ModSecurity可能已有人在做 @fzipi 今天认领。 未关闭bug
难度 2/5 1-3 小时 新手友好度 78/100
维护者通常 1 天内回复