Restricting User-Controlled Kubernetes Pods
Cloudera Data Science Workbench 1.6.0 (and higher) includes three properties that allow you to control the permissions granted to user-controlled Kubernetes pods.
Required Role: Site Administrator
An example of a user-controlled pod is the engine pod, which provides the environment for sessions, jobs, etc. These pods are launched in a per-user Kubernetes namespace. Since the user has the ability to launch arbitrary pods, these settings restrict what those pods can do.
They are available under the site administrator panel at under the Control of User-Created Kubernetes Pods section.
Do not modify these settings unless you need to run pods that require special privileges. Enabling any of these properties puts CDSW user data at risk.
