Set Up Rok Accounts

This section will guide you through creating and configuring the namespaces that each Rok user can access. In order for users to access resources on Rok, you have to give them rok-admin ClusterRole in each namespace they have permission. Upon login, the Rok UI will display the namespace that matches the username. Ensure that the namespace and RoleBinding exist for all users you created.

Important

If you are planning to deploy Kubeflow alongside Rok, Kubeflow’s profiles controller will provision the namespaces and RBAC rules automatically. Still, you need to follow this guide to create a user named user. You will need it in the next section to test Rok.

Procedure

  1. Create a namespace for each user. To create the namespace user, i.e., the namespace for the resources of the user user, run:

    root@rok-tools:~# kubectl create namespace user
    
  2. Create a role binding for each user in the namespace you created above. To provide access to the user user in the namespace user, run:

    root@rok-tools:~# kubectl create rolebinding rok-admin-user --namespace user \
    >         --clusterrole rok-admin --user user
    

Summary

You have successfully created namespaces and rolebindings for each Rok user.

What’s Next

The next step is to test Rok and verify it works properly.