Skip to content

Configure Ollama with q8_0 KV cache quantization#512

Draft
agentydragon wants to merge 1 commit intodevelfrom
claude/cluster-rbac-read-only-xZIIn
Draft

Configure Ollama with q8_0 KV cache quantization#512
agentydragon wants to merge 1 commit intodevelfrom
claude/cluster-rbac-read-only-xZIIn

Conversation

@agentydragon
Copy link
Copy Markdown
Owner

No description provided.

Creates new claude-rbac-read-only configuration with ClusterRole and
ClusterRoleBinding for cluster-wide read access.

Depends on claude-rbac (from separate branch) which creates the
claude-readonly ServiceAccount.

Permissions:
- ✅ Read pods, deployments, services, logs cluster-wide
- ✅ Read Flux resources (Kustomizations, GitRepositories)
- ❌ NO direct secrets access
- ❌ NO write permissions
- ❌ NO exec access cluster-wide

Deployment order:
1. claude-rbac (ServiceAccount + sandbox namespace)
2. claude-rbac-read-only (ClusterRole + ClusterRoleBinding) [optional]

This allows deploying sandbox-only OR sandbox + cluster-wide read,
depending on security requirements.

https://claude.ai/code/session_014ZkViKfHzYuWY5TfEnuL11
@agentydragon agentydragon force-pushed the claude/cluster-rbac-read-only-xZIIn branch from 4282f93 to 62aff4f Compare February 13, 2026 22:12
@agentydragon agentydragon force-pushed the devel branch 2 times, most recently from cb3df7d to 2a0568e Compare February 20, 2026 03:42
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants