server
server copied to clipboard
rbac required to run triton in k8s
Is your feature request related to a problem? Please describe. A clear and concise description of what the problem is. Ex. I'm always frustrated when [...] In the triton secure deployment consideration, it is mentioned to run it with a service account with fewest permission but i did not find any recommendation under triton deploy charts.
When deploying Triton within a Kubernetes pod ensure that it is running with a service account with the fewest possible permissions. Ensure that you have configured role based access control to limit access to resources and capabilities as required by your application.
Describe the solution you'd like A clear and concise description of what you want to happen. A rbac suggested for k8s_onprem or aws.
Describe alternatives you've considered A clear and concise description of any alternative solutions or features you've considered. I can try out with a basic set but I cannot confirm that there will be any issue.
Additional context Add any other context or screenshots about the feature request here. Nil
Hi @okyspace, thanks for filing this. Just to clarify, this is a request for a recommended RBAC configuration when using Triton in Kubernetes to use as an example/reference to go along with the secure deployment guide?
CC @nnshah1 @nv-kmcgill53
Yes. Exactly.
@okyspace Could you please provide more details about your use case? For multi-tenant on K8s?
@okyspace Details about your use case would be helpful for drafting a recommended configuration. Thanks, @yeahdongcn.
@rmccorm4 Is this a good candidate as an enhancement? If so, let me know and I can create a ticket for tracking.