Ben Sherman

Okay just making sure. If you're okay with using the default service account then you can just add the role binding as shown in the OP. If you're still having...

@tjdurant You mean creating your own submitter pod instead of `kuberun`? I don't think it did.

Finally able to reproduce this problem in EKS. I found a related problem, which is that if my kube config is set to the `default` namespace, I get a similar...

Okay, I think I figured out the problem. Nextflow has a `K8sClient` that makes HTTP requests to the K8s cluster. The HTTP requests use a bearer token that is provided...

Found the culprit I think: https://github.com/nextflow-io/nextflow/blob/ce7fa651c5fd2c0d7164ad0ecf0e2ef4e13ba8fd/modules/nextflow/src/main/groovy/nextflow/k8s/client/ConfigDiscovery.groovy#L154-L155

This method is essentially doing what I outlined in the previous comment. So we need to parameterize this method for the namespace and service account name. I will draft a...

Apparently the `Date` class is out of fashion, so I will refactor the changes to use `java.time.*` classes, which should be easier to mock.

@kanor1306 So you can provision an ephemeral CSI volume with this approach? If yes then maybe it would be better for Nextflow to use, otherwise we should consider it in...

@pditommaso please see the `docs/README.md`, it contains all the instructions you need to build the docs.

@pditommaso Ready to merge! please merge 🙏