BEGIN:VCALENDAR
VERSION:2.0
PRODID:-//DevOpsChat//Events//EN
CALSCALE:GREGORIAN
METHOD:PUBLISH
BEGIN:VEVENT
UID:01a1989d-2cc9-7376-9b27-0f3e7201a440@www.devopschat.co
DTSTAMP:20261106T122801Z
DTSTART:20220223T090000Z
DTEND:20220223T100000Z
SUMMARY:How Open OnDemand uses Kyverno to deliver self-service Kubernetes f
 or HPC
DESCRIPTION:**\\*\\* Please register for this event via the Zoom page\\*\\*
 **\n\n**REGISTER HERE:** https://nirmata.zoom.us/webinar/register/WN_uq9ZT
 I-YSMG2z84ob6v6mA\n\nSupporting Kubernetes through Open OnDemand presents 
 many challenges with regard to safely allowing users to run applications i
 nside Kubernetes in a similar manner to how jobs would run in an High Perf
 ormance Computing batch environment. To overcome these challenges\, the Oh
 io Supercomputer Center has utilized the Kyverno policy engine to ensure t
 hat users using Kubernetes are doing so in a safe and secure way.\n\nThe m
 ain challenge with user-submitted Kubernetes pods was ensuring that those 
 pods are run as the UID/GID and supplemental groups belonging to that user
 . Additionally\, there were challenges ensuring that users were authorized
  for the account they specified and could be charged for the resources con
 sumed inside Kubernetes. These challenges were solved by deploying the Kyv
 erno policy engine and implementing policies that ensure a user’s pod ha
 s certain required configurations set. Data from our local LDAP was used b
 y the Kyverno policies to ensure not only correct UID/GID mappings but als
 o that only active users are running pods. These changes are used to permi
 t Kubernetes pods launched through Open OnDemand to have access to the sam
 e file systems as the HPC batch environment.\n\n**REGISTER HERE:** https:/
 /nirmata.zoom.us/webinar/register/WN_uq9ZTI-YSMG2z84ob6v6mA\n\nhttps://www
 .devopschat.co/meetings/how-open-ondemand-uses-kyverno-to-deliver-self-ser
 vice-kubernetes-for-hpc
URL:https://www.devopschat.co/meetings/how-open-ondemand-uses-kyverno-to-de
 liver-self-service-kubernetes-for-hpc
END:VEVENT
END:VCALENDAR