Managing Kubernetes namespaces

The Gremin Kubernetes agent will automatically detect namespaces in your Kubernetes cluster. You can share individual namespaces with other Gremlin teams. By sharing individual namespaces to teams across your company, you can provide access for users to run experiments only on relevant services while also limiting access to the hosts or nodes themselves.

Once installed, head to the Clusters list in the Gremlin web app to view all of the clusters installed across your company.

‍

Requesting namespace access

As a member of a Gremlin company, you can see all of the Kubernetes clusters belonging to all teams in your company. You can also request access to a specific namespace, although this will require a team member to grant your request.

To request access to a namespace:

1. In the Gremlin web app, select Configurations in the left-hand navigation menu, then select Clusters.
2. Search for or scroll to the name of the cluster containing the namespace you want to request access to, then click Manage Requests.
3. Select the namespace(s) you want to access, or click Select All for full access.
4. Click Save.

You can also request access to a namespace within a cluster when creating an experiment. Once you've selected a cluster, the drop down list of namespaces will have an option to request access.

Once a manager has approved your request, you'll be able to target resources in the namespace when creating experiments, Scenarios, or reliability tests.

‍

Approving access requests

If you have the TEAMS_WRITE  privilege, you can grant a request to access a namespace. To review requests, navigate to the Clusters list, locate your cluster, then click the gear icon to the right. On the Manage Cluster Access page, you'll see any pending requests from your company.

‍

Granting namespace access to another team

If another team requests access to a namespace in a cluster that your team owns, Gremlin will show an orange badge next to Configurations in the navigation menu. To grant another team access:

1. Select Configurations in the left-hand navigation menu, then select Clusters.
2. Search for or scroll to the name of the team requesting access (there will be an icon next to the cluster), then click on the name.
3. Select the namespace(s) you want to share, or click Select All.
4. Click Approve.

‍

Revoking namespace access

To revoke another team's access to a namespace that your team owns:

1. Follow steps 1-3 under Granting namespace access to another team.
2. Click the X button next to the namespace you want to revoke access to. Alternatively, click Unshare all to revoke all namespace.

‍

‍