[slack-digest] [2019-08-26] #general

[OpenWhisk Team Slack <ra...@apache.org>]

2019-08-26 05:14:38 UTC - chetanm: This is not possible with current impl. However with some changes in KCF and way ContainerFactory are invoked it may be possible to do that/

Any background on why you want to do this and not let all action containers run in same namespace?

[1] <https://github.com/apache/openwhisk/blob/master/core/invoker/src/main/scala/org/apache/openwhisk/core/containerpool/kubernetes/KubernetesContainerFactory.scala>
https://openwhisk-team.slack.com/archives/C3TPCAQG1/p1566796478016400?thread_ts=1566626075.016100&cid=C3TPCAQG1
----
2019-08-26 06:15:42 UTC - Selçuk: Sorry, I didn't see your message. I have never run another command. I didn't do anything on weekend, however the images are still in the same statuses.
https://openwhisk-team.slack.com/archives/C3TPCAQG1/p1566800142016600?thread_ts=1566547916.004900&cid=C3TPCAQG1
----
2019-08-26 06:15:48 UTC - Selçuk: 
https://openwhisk-team.slack.com/archives/C3TPCAQG1/p1566800148016800?thread_ts=1566547916.004900&cid=C3TPCAQG1
----
2019-08-26 08:50:25 UTC - Nikolai Starodubtcev: thanks for the link!
I'm working on public FaaS based on OpenWhisk, so I try to make my users actions as much isolated, as possible. May be, it's a lack of my knowledge about OpenWhisk or Kubernetes, but AFAIK if 2 Pods running in one namespace they can reach each other
https://openwhisk-team.slack.com/archives/C3TPCAQG1/p1566809425017400?thread_ts=1566626075.016100&cid=C3TPCAQG1
----
2019-08-26 14:54:01 UTC - Dave Grove: If you are setting up a multi-tenant OpenWhisk on Kubernetes, you will need to do some work to isolate tenants from each other (and from the OpenWhisk control plane).  A first step would be to add NetworkPolicy definitions (<https://kubernetes.io/docs/concepts/services-networking/network-policies/>) .
https://openwhisk-team.slack.com/archives/C3TPCAQG1/p1566831241017800?thread_ts=1566626075.016100&cid=C3TPCAQG1
----