fix: project template; gpu autoscale

redhat-na-ssa · Sep 17, 2023 · a42ed35 · a42ed35
1 parent bb78de0
commit a42ed35
Show file tree

Hide file tree

Showing 2 changed files with 36 additions and 38 deletions.
diff --git a/components/configs/autoscale/overlays/gpus/kustomization.yaml b/components/configs/autoscale/overlays/gpus/kustomization.yaml
@@ -24,7 +24,5 @@ patches:
           min: 0
           max: 256
       - op: replace
-        path: /spec/resourceLimits/gpus/0
-        value:
-          min: 0
-          max: 4
+        path: /spec/resourceLimits/gpus/0/max
+        value: 4
diff --git a/components/configs/namespaces/base/project-request-termplate.yaml b/components/configs/namespaces/base/project-request-termplate.yaml
@@ -55,40 +55,40 @@ objects:
       name: '${PROJECT_NAME}'
     spec: {}
     status: {}
-  # - apiVersion: rbac.authorization.k8s.io/v1
-  #   kind: RoleBinding
-  #   metadata:
-  #     annotations:
-  #       openshift.io/description: >-
-  #         Allows all pods in this namespace to pull images from this namespace.
-  #         It is auto-managed by a controller; remove subjects to disable.
-  #     name: 'system:image-pullers'
-  #     namespace: '${PROJECT_NAME}'
-  #   roleRef:
-  #     apiGroup: rbac.authorization.k8s.io
-  #     kind: ClusterRole
-  #     name: 'system:image-puller'
-  #   subjects:
-  #     - apiGroup: rbac.authorization.k8s.io
-  #       kind: Group
-  #       name: 'system:serviceaccounts:${PROJECT_NAME}'
-  # - apiVersion: rbac.authorization.k8s.io/v1
-  #   kind: RoleBinding
-  #   metadata:
-  #     annotations:
-  #       openshift.io/description: >-
-  #         Allows builds in this namespace to push images to this namespace.  It
-  #         is auto-managed by a controller; remove subjects to disable.
-  #     name: 'system:image-builders'
-  #     namespace: '${PROJECT_NAME}'
-  #   roleRef:
-  #     apiGroup: rbac.authorization.k8s.io
-  #     kind: ClusterRole
-  #     name: 'system:image-builder'
-  #   subjects:
-  #     - kind: ServiceAccount
-  #       name: builder
-  #       namespace: '${PROJECT_NAME}'
+  - apiVersion: rbac.authorization.k8s.io/v1
+    kind: RoleBinding
+    metadata:
+      annotations:
+        openshift.io/description: >-
+          Allows all pods in this namespace to pull images from this namespace.
+          It is auto-managed by a controller; remove subjects to disable.
+      name: 'system:image-pullers'
+      namespace: '${PROJECT_NAME}'
+    roleRef:
+      apiGroup: rbac.authorization.k8s.io
+      kind: ClusterRole
+      name: 'system:image-puller'
+    subjects:
+      - apiGroup: rbac.authorization.k8s.io
+        kind: Group
+        name: 'system:serviceaccounts:${PROJECT_NAME}'
+  - apiVersion: rbac.authorization.k8s.io/v1
+    kind: RoleBinding
+    metadata:
+      annotations:
+        openshift.io/description: >-
+          Allows builds in this namespace to push images to this namespace.  It
+          is auto-managed by a controller; remove subjects to disable.
+      name: 'system:image-builders'
+      namespace: '${PROJECT_NAME}'
+    roleRef:
+      apiGroup: rbac.authorization.k8s.io
+      kind: ClusterRole
+      name: 'system:image-builder'
+    subjects:
+      - kind: ServiceAccount
+        name: builder
+        namespace: '${PROJECT_NAME}'
   - apiVersion: rbac.authorization.k8s.io/v1
     kind: RoleBinding
     metadata: