Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

GKE Autopilot Support for CodeFresh Runner #640

Open
SpainTrain opened this issue Mar 23, 2021 · 0 comments
Open

GKE Autopilot Support for CodeFresh Runner #640

SpainTrain opened this issue Mar 23, 2021 · 0 comments

Comments

@SpainTrain
Copy link

GKE supports a new cluster type called AutoPilot - https://cloud.google.com/kubernetes-engine/docs/concepts/autopilot-overview. AutoPilot provides very granular billing for pod requests, which is a great conceptual match with CodeFresh Runner hybrid pipelines. However, it appears that CodeFresh runner uses hostPath volume, which is not allowed in AutoPilot (see below).

I understand that this could be a significant change, but having CodeFresh pipeline jobs run on a GKE AutoPilot cluster would be incredibly powerful. This would allow direct resource control for jobs within CodeFresh - updating the pod request values in the pipeline config would in turn increase the request to the cluster, and GKE AutoPilot would automatically run the pod with the requested resources. Such a setup would put resource control directly in the hands of our CI users, and remove a whole exercise of node pool planning (and associated wasted resources).

Error: admission webhook "validation.gatekeeper.sh" denied the request: [denied by autogke-no-write-mode-hostpath] hostPath volume dind-volume-dir in container lv-cleaner is accessed in write mode; disallowed in Autopilot. 

From https://cloud.google.com/kubernetes-engine/docs/concepts/autopilot-overview:

HostPort and hostNetwork are not permitted because node management is handled by GKE. Using hostPath volumes in write mode is prohibited, while using hostPath volumes in read mode is allowed only for /var/log/ path prefixes. Using host namespaces in workloads is prohibited.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant