Managing Kubernetes namespaces

‍

The Gremin Kubernetes agent will automatically detect namespaces in your Kubernetes cluster. You can share individual namespaces with other Gremlin teams. By sharing individual namespaces to teams across your company, you can provide access for users to run experiments only on relevant services while also limiting access to the hosts or nodes themselves.

Once installed head to the Agents list in the Gremlin web app to view all of the clusters installed across your company.

‍

Requesting namespace access

As a member of a Gremlin company, you can see all of the Kubernetes clusters belonging to all teams in your company. You can also request access to a specific namespace, although this will require a team member to grant your request.

To request access to a namespace:

1. In the Gremlin web app, select Agents in the left-hand navigation menu, then select the Kubernetes tab.
2. Search for or scroll to the name of the cluster containing the namespace you want to request access to.
3. Click on the three dots to the right, then click Request Access.
4. Search for or scroll to the namespace(s) you want to acess, then click the check box next to it. You can select multiple namespaces.
5. Click Request Access.

You can also request access to a namespace within a cluster when creating an experiment. Once you've selected a cluster, the drop down list of namespaces will have an option to request access.

Once a manager has approved your request, you'll be able to target resources in the namespace when creating experiments, Scenarios, or reliability tests.

‍

Approving access requests

If you have the TEAMS_WRITE  privilege, you can grant a request to access a namespace. To review requests, navigate to the Agents list, locate your cluster, then click the gear icon to the right. On the Manage Cluster Access page, you'll see any pending requests from your company.

‍

Granting namespace access to another team

To allow another team to run experiments on a namespace that your team owns:

1. In the Gremlin web app, select Agents in the left-hand navigation menu, then select the Kubernetes tab.
2. Search for or scroll to the name of the cluster containing the namespace you want to share, then click the gear icon on the right-hand side ("Manage Cluster Access").
3. Search for or scroll to the team you want to share the namespace with.
4. Click on the combo box to the right of the team and select the namespace(s) you want to share. Alternatively, click on the three dots and select Share all to share the entire cluster.

‍

Revoking namespace access

To revoke another team's access to a namespace that your team owns:

1. Follow steps 1-3 under Granting namespace access to another team.
2. Click the X button next to the namespace you want to revoke access to. Alternatively, click on the three dots to the right and select Unshare all to revoke all namespace.
3. Click Revoke Access to confirm.

‍