Requesting a Project, Access Control

Kubernetes clusters support two types of projects:

• Individual projects
• Group projects

When you sign into the Rancher instance, you receive a default individual project (see here for more information) with the default quotas described here.

You must be a valid MetaCentrum member to access projects in Rancher. If you are not a member, register here.

Requesting a Group Project

We are preparing a convenient request form that will be available on this page when ready. In the meantime, contact us at k8s@cerit-sc.cz if you need a group project. By default, group projects receive 12 CPU request, 64 CPU limit, 40GB RAM request, and 256GB RAM limit.

Using an Existing Group for Access Control

If you already have a group in perun.e-infra.cz, include the group’s VO in your email. If the group is in the VO e-infra.cz, also include the group’s ID.

Provide the following information:

• Name of the new project
• Desired resource quota (optional if the default is sufficient)
• The person responsible for the project (name, organization, and either UCO if from MU or MetaCentrum login)

No Group Yet for Access Control

If you don’t have a group, we will create one for you. Include the note “create a new group for a Rancher project” in your email.

Provide the following information:

• Name of the new project
• Desired resource quota (optional if the default is sufficient)
• The person responsible for the project (name, organization, and either UCO if from MU or MetaCentrum login)

Access Control

Provide the name of the person responsible for project access control. You (or someone from your group) manage who can access the project. Even if you know an existing Perun group name you’d like to use, you must assign it yourself. After we prepare the Perun resource, the responsible person receives administrator privileges. Administrators can add other administrators, assign allowed groups to the resource, or add members.

The most common access control method involves assigning a group with multiple members to a Perun resource. The following tutorial shows an administrator (the person you designated in your email) how to assign such a group.

1. Log into CESNET Perun.
2. Scroll down the home page until you see the Manager in Resources table.
3. Click the resource matching your requested project name.
4. Click Assigned Groups.
5. Click Assign Groups, enter the group name in the search bar, and select the desired group.
6. Click Next, leave all options as they are, and click Assign group.
7. Changes take 5-10 minutes to propagate. Wait at least 10 minutes, then log out and back into Rancher or simply refresh the page. You and all group members should now see the project.

Requesting a Larger Individual Project

We are preparing a convenient request form that will be available on this page when ready. In the meantime, contact us at k8s@cerit-sc.cz if you need a larger project for your personal use.

In your email, include:

• Name of the new project
• Desired resource quota