2019-08-26 05:14:38 UTC - chetanm: This is not possible with current impl. 
However with some changes in KCF and way ContainerFactory are invoked it may be 
possible to do that/

Any background on why you want to do this and not let all action containers run 
in same namespace?

[1] 
<https://github.com/apache/openwhisk/blob/master/core/invoker/src/main/scala/org/apache/openwhisk/core/containerpool/kubernetes/KubernetesContainerFactory.scala>
https://openwhisk-team.slack.com/archives/C3TPCAQG1/p1566796478016400?thread_ts=1566626075.016100&cid=C3TPCAQG1
----
2019-08-26 06:15:42 UTC - Selçuk: Sorry, I didn't see your message. I have 
never run another command. I didn't do anything on weekend, however the images 
are still in the same statuses.
https://openwhisk-team.slack.com/archives/C3TPCAQG1/p1566800142016600?thread_ts=1566547916.004900&cid=C3TPCAQG1
----
2019-08-26 06:15:48 UTC - Selçuk: 
https://openwhisk-team.slack.com/archives/C3TPCAQG1/p1566800148016800?thread_ts=1566547916.004900&cid=C3TPCAQG1
----
2019-08-26 08:50:25 UTC - Nikolai Starodubtcev: thanks for the link!
I'm working on public FaaS based on OpenWhisk, so I try to make my users 
actions as much isolated, as possible. May be, it's a lack of my knowledge 
about OpenWhisk or Kubernetes, but AFAIK if 2 Pods running in one namespace 
they can reach each other
https://openwhisk-team.slack.com/archives/C3TPCAQG1/p1566809425017400?thread_ts=1566626075.016100&cid=C3TPCAQG1
----
2019-08-26 14:54:01 UTC - Dave Grove: If you are setting up a multi-tenant 
OpenWhisk on Kubernetes, you will need to do some work to isolate tenants from 
each other (and from the OpenWhisk control plane).  A first step would be to 
add NetworkPolicy definitions 
(<https://kubernetes.io/docs/concepts/services-networking/network-policies/>) .
https://openwhisk-team.slack.com/archives/C3TPCAQG1/p1566831241017800?thread_ts=1566626075.016100&cid=C3TPCAQG1
----

Reply via email to