Comments (6)
Are you thinking of a scenario where all deployments within the whitelisted namespaces will be enrolled into Kube monkey? We'd have to figure out a way to specify parameters like MTBF etc. in this case.
An alternative way to do that would be instead of opting in deployments, maybe there could be an option to opt-in namespaces instead (by adding the kubernetes labels to them).
In either case, this isn't something that is currently supported. I'll try to take a look, but PRs are also welcome.
from kube-monkey.
We too had discussed the preference of configuring opt-in
vs opt-out
. The cluster we would like to run this on has feature namespaces provisioned sometimes on daily basis in which case, we likely would not want to disturb those. This would also require us to constantly update the blacklisting of namespaces, versus explicitly saying which namespaces to run it against. I might look into branching off and making it configurable.
from kube-monkey.
@EIrwin I'm all for having an opt-in option. I just haven't figured out the best way to handle configurations like MTBF etc in this case. Perhaps we could use a system where you globally set the mode to opt-in
and specify some global value for MTBF. individual deployments can then override this value.
I'll take a look at this but if you do end up forking and implementing this, do ping me and I'll take a look at it.
from kube-monkey.
@asobti that was similar to the approach I have started implementing. The first iteration could simply use a opt-in
bool along with a global MTBF
to be used. In later iteration(s), this could be extended to allow individual deployments to override this value.
from kube-monkey.
Sounds good. I'll hold off on working on this for now in that case so we're not repeating the same work.
from kube-monkey.
Facing the same use-case. We have a shared cluster and there's no way for us to know all the namespaces to blacklist.
Maybe another idea is to have kube-monkey run per namespace? Or limit via RBAC rules?
from kube-monkey.
Related Issues (20)
- version error when installing helm chart via flux
- kube-monkey schedules Termination successfully, but POD always doesn't be killed HOT 6
- pods still continues to terminate after the end_hour HOT 2
- Simplify labels to opt in to chaos
- Context deadline exceeded during slack notification
- No terminations scheduled problem HOT 2
- Kubectl exec into Kube-monkey pod
- Failed to execute termination for v1.StatefulSet . Error: no terminations requested for v1.StatefulSet
- Missing copyright information HOT 1
- KubeMonkey isnt killing any pods HOT 1
- Kill - frequency control HOT 1
- Documentation site for Kube-Monkey HOT 1
- Golang monkey patching library utilized against terms of license
- How to pull from a private docker registry?
- Chart doesn't work with rbac disabled
- CVEs in latest kube-monkey Image HOT 2
- Debug mode - extend run time HOT 1
- Schedule terminations days HOT 2
- Documentation error: broken link config/param/param.go not found
- podSecurityContext does not work using Helm values template
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from kube-monkey.