A twenty year old tech lover who likes turning maths and ideas into solid code. Some of those ideas now live inside the codebases of companies like these.
WASD or arrows to slide · Shift to dash · click the snow to go there.Drag anywhere to steer. Tap a building to go there.
Hold W to slide · A D to turn · S back · Shift dash · E open
Pick one and the seal slides there.
Eleven landed contributions. Every number below was measured on a named machine against a control, and every one of them sits in a merged diff or on the default branch it targets.
145 lines changed across 4 files. pods, nodes and daemonsets access no longer granted cluster wide.
The API server ClusterRole rendered the same Kubernetes RBAC rules regardless of engine and provider, so an install that never reached the Kubernetes API, for example provider test with engine slurm, was still granted pods list, nodes get and list, and daemonsets get, cluster wide. I gated each rule on engine.name and provider.name.
