chenk008

https://kubernetes.io/docs/concepts/workloads/pods/init-containers/#pod-restart-reasons > All containers in a Pod are terminated while restartPolicy is set to Always, forcing a restart, and the Init Container completion record has been lost due to garbage...

Add another case: https://github.com/kubernetes/kubernetes/issues/125397

It can help to restrict secure access to dashboard, and we can integrate authentication with serviceaccount. The job config may like ``` apiVersion: batch/v1 kind: Job metadata: name: test-oauth-client spec:...

I think we can harden dashboard with oauth: 1. ray dashboard listen to 127.0.0.1:8264 2. oauth2-proxy run as a sidecar in head, it will proxy to 127.0.0.1:8264. And the proxy...

related issue in ray core https://github.com/ray-project/ray/issues/39502