Justin Bertrand

NOTE: It may be good to start moving this into an epic since its scoping has definitely gotten larger that the ticket description. This conversation is expanding quite a bit...

What's the exact issue here? The user is added as a contributor but then they can't do what?

The mechanism from which the access to the namespace is granted is through RoleBindings of the kubeflow-edit role in the namespace. Three RoleBindings were created 13 days ago for users....

Or @chritter can you run `kubectl -n get rolebindings` and see if everyone you gave access to is there?

@chritter Thanks! If you can have a chat with them and report back to give us a bit more info, I'll continue to look into it! :)

There seems to be a conflict issue on KF where it tracks users via the user annotation and this is case-sensitive, However, the resources tracking the user through the RoleBinding...

I don't think so. From what @zachomedia was saying it's expected ([the case-sensitivity](https://kubernetes.io/docs/reference/access-authn-authz/rbac/#rolebinding-example)). The issue also stems from random uppercasing in the username creation in our tenant, so THAT should...

This issue arose once again on Dec. 2nd, 2023 during the upgrade to Kubernetes 1.26. While trying to fix it by setting `nodeSelectors`, it seems that there are policies in...

Also hitting this. I think, instead of having the the template lookup the secret and copy it to a new secret, the secret could just be mounted. It needs to...