Nick Stogner

`I wonder if the first non-POSIX behavior outlined is a dealbreaker or not` GCS Fuse is non-POSIX: https://cloud.google.com/storage/docs/gcs-fuse#expandable-1 One more (abandoned) CSI driver project for reference: https://github.com/ctrox/csi-s3/tree/master

This comes with complications around establishing TLS trust at the node level for pulling images (as you know). A lot of companies will have admission controller policies against installing a...

Hi @rmasiniexpert, glad to see you are interested in the project! The team just started working on AWS support today. We will write up some documentation on how to add...

We should discourage secrets from being passed in a model object. My preference would be to have secrets set at the cluster or namespace level, and brought into params via...

One thought is if we need to implement a validation check on whether the image exists in a validating webhook (for Model creation): that would require the controller to have...

You bring up some really good implications of adding authorization to the controller itself around tenant isolation. We need to keep these in mind. It still seems to me like...

One option here would be for the substratus controller to create cloud (GCP) service accounts on the fly.

Information about whether something is pending could probably come from the Job API. Perhaps a kubectl plugin would be better suited for further drill down… ie events and pod statuses...

This probably goes hand in hand with introducing Model types. Wonder if they should be the same or if there is some sort of N:1 relationship.

Perhaps we could provide a way of importing Models from various hubs and all models would be saved using ONNX. This would then allow for decoupling where the Model was...