You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
While perhaps out of scope, the CO should not need to know that there are storage resource limits based on admin identity or any other policy beyond of cluster-wide shared resources. In order to apply resource quotas at the Controller Plugin level there should be provision for passing the owning identity associated with a Volume. The identity of the creating admin could probably be used but it's not clear to me that this security context is supplied by the gRPC workflow from CO to the Controller Plugin.
This also implies a potential new error code for CreateVolumeRequest to describe a resource quota limit being exceeded.
The text was updated successfully, but these errors were encountered:
While perhaps out of scope, the CO should not need to know that there are storage resource limits based on admin identity or any other policy beyond of cluster-wide shared resources. In order to apply resource quotas at the Controller Plugin level there should be provision for passing the owning identity associated with a Volume. The identity of the creating admin could probably be used but it's not clear to me that this security context is supplied by the gRPC workflow from CO to the Controller Plugin.
This also implies a potential new error code for CreateVolumeRequest to describe a resource quota limit being exceeded.
The text was updated successfully, but these errors were encountered: