Configuration name

NB: renaming or removing configurations could cause trouble.

Container engine

Base URL of the image registry, in the form host/root. See doc. for more information. Generally not required when using Docker

Image registry pull secret name

Optional: The secret name is used in the Kubernetes imagePullSecrets manifest section. This is required if your container registry is private and your cluster needs to authenticate to it for pulling images.

Image pre-push hook

Absolute path to a shell script. Receives the repository url, image name & tag as arguments. This script should support being called on an already-existing image/tag.

Docker host

Leave empty to use the default docker host specified by your environment (generally the local Docker env)

Docker network

E.g. 'host', 'bridge' (or empty), or user-defined network

Docker runtime

Leave empty to use the default runtime. Use 'nvidia' for GPU-enabled containers

Docker GPUs

GPUs to expose to the containers. E.g. 'all' to expose all GPUs, '"device=0,2"' for GPUs 0 and 2, leave empty for no GPU

Authentication

Enable TLS

Secure Docker communications using TLS certificates

Certificates path

Leave empty to use the default path.

Kubernetes Namespace

Kubernetes namespace to use. Variable expansion is supported. Empty = use cluster default

Make K8S-compliant

Automatically adjust namespace name to ensure it is compatible with the RFC1123 sub-domain syntax enforced by Kubernetes

Auto-create namespace

Automatically create the namespace if it doesn't already exist.

Permissions

Usable by

Everyone Selected groups

↳ usable by groups

Workload type

Memory request for containers in MB. -1 = default (inherit namespace settings)

Memory limit

Memory limit for containers in MB. -1 = default (inherit namespace settings)

CPU request

CPU request for containers (0.5 = 50% of a core, 2 = 2 cores). -1 = default (inherit namespace settings)

CPU limit

CPU limit for containers (0.5 = 50% of a core, 2 = 2 cores). -1 = default (inherit namespace settings)

Custom requests

Custom Kubernetes requests key-value.

Custom limits

Custom Kubernetes limits key-value. For example, on Google Kubernetes Engine, use nvidia.com/gpu = 1 to get a GPU node

Node selector

</div>
                        </div>
                        <div class="control-group">
                            <label class="control-label">Affinity</label>
                            <div class="controls">
                                
                                    <textarea style="width: 700px" ng-model="execConfig.affinity" zui-codemirror="codeMirrorSettingService.get('text/yaml')" placeholder="Optional pod affinity YAML specification. Must start with 'affinity:' followed by 2-space indented Kubernetes pod affinity specification" />
                                
                            </div>
                        </div>
                        <div class="control-group">
                            <label class="control-label">Tolerations</label>
                            <div class="controls">
                                
                                    <textarea style="width: 700px" ng-model="execConfig.tolerations" zui-codemirror="codeMirrorSettingService.get('text/yaml')" placeholder="Optional pod tolerations YAML specification. Must start with 'tolerations:' followed by 2-space indented Kubernetes pod affinity specification" />
                                
                            </div>
                        </div>
                        <div class="control-group">
                            <label class="control-label">Topology spread constraints</label>
                            <div class="controls">
                                
                                    <textarea style="width: 700px" ng-model="execConfig.deploymentTopologySpreadConstraints" zui-codemirror="codeMirrorSettingService.get('text/yaml')" placeholder="Optional topology spread constraints YAML specification. Must start with 'topologySpreadConstraints:' followed by 2-space indented Kubernetes pod topology spread constraint specification" />
                                
                            </div>
                        </div>
                        <div class="control-group">
                            <label class="control-label">HostPath volumes</label>
                            <div class="controls">

<ng2-key-values-list 
                                    [(items)]="execConfig.hostPathVolumes" 
                                    key-placeholder="Host path"
                                    value-placeholder="Container path"
                                    add-label="Add HostPath volumes">
                                </ng2-key-values-list>
                                <span class="help-inline">Additional "hostPath" type volumes to mount in containers. This is usually only required for GPU support on Azure Kubernetes Service
                            </div>
                        </div>
                        <div class="control-group">
                            <label class="control-label">Increase shared memory size</label>
                            <div class="controls">
                                <input type="checkbox" ng-model="execConfig.enableCustomSHM"/>
                                <span class="help-inline">Recommended for running torch workloads (e.g. LLM inference), otherwise defaults to 64MB</span>
                            </div>
                        </div>
                        <div class="control-group" ng-if="execConfig.enableCustomSHM">
                            <label class="control-label">Shared memory size</label>
                            <div class="controls">
                                <input type="number" force-integer ng-model="execConfig.customSHMValueMB"/>
                                <span class="help-inline">Shared memory limit of the container in MB. -1 = default (1/2 of node's memory)</span>
                            </div>
                        </div>

</div>
                    
                    <h3>Advanced settings</h3>

<div class="control-group">
                        <label class="control-label">Base image for User Code</label>
                        <div class="controls">
                            <input type="text" ng-model="execConfig.baseImage"/>
                            <span class="help-inline">
                                Used for User Code workload type. Leave empty to use the default image (see doc. for more information about base images)
                            </span>
                        </div>
                    </div>
                    <div ng-show="isBaseImageNameSuspicious(execConfig.baseImage)" class="alert alert-warning">
                        <strong><i class="icon-warning-sign"></i> It looks like this base image contains a repository URL.</strong> <br />
                        Make sure to input only the base image's name in this field. The repository is specified above in the "Image registry URL" setting.
                    </div>
                    <div ng-if="execConfig.type == 'KUBERNETES'">
                        <div class="control-group">
                            <label class="control-label">Kubectl Context</label>
                            <div class="controls">
                                <input type="text" ng-model="execConfig.kubeCtlContext"/>
                                <span class="help-inline">kubectl context to use (empty = use default). This will not be taken into account if using dynamic K8S clusters</span>
                            </div>
                        </div>
                        <div class="control-group">
                            <label class="control-label">Kube config path</label>
                            <div class="controls">
                                <input type="text" ng-model="execConfig.kubeConfigPath"/>
                                <span class="help-inline">Path to the config file for Kubectl (empty = use default). This will not be taken into account if using dynamic K8S clusters</span>
                            </div>
                        </div>
                    </div>

<div class="control-group">
                        <label class="control-label">Custom properties</label>
                        <div class="controls">
                            <ng2-key-values-list 
                                [(items)]="execConfig.properties"
                                key-placeholder="Property key"
                                value-placeholder="Property value"
                                add-label="Add Custom Property">
                            </ng2-key-values-list>
                            <span class="help-inline">Additional properties about this container config, for use by DSS. For specific use cases.</span>
                        </div>
                    </div>
                 </div>

<button type="button" class="btn btn--primary btn--text" ng-click="add(getNewContainerConfig())" style="margin-top: 10px;">
                    <i plus-icon />  Add another config
                </button>
            </div>

</div>
    </div>
    <div class="section" ng-if="(!mask || mask.enabled)">
        <h2 id="default-exposition-for-kubenetes-webapps">Default exposition for Kubernetes webapps</h2>

<div ng-class="{'alert': true, 'alert-info': settings.defaultWebappsK8SExposition.type == 'port_forward', 'alert-warning': settings.defaultWebappsK8SExposition.type != 'port_forward'}">
             Port-forwarding exposition provides the best setup and reliability for webapps. It allows secure webapps which are usually not possible with other modes.<br />
             Dataiku does not recommend moving away from Port-forwarding
        </div>

<div class="control-group" ng-if="mask">
            <label class="control-label">Override expositions</label>
            <div class="controls">
                <label>
                    <input type="checkbox" ng-model="mask.defaultWebappsK8SExposition">
                    <span class="help-inline">Override this to override the default exposition for webapps running on Kubernetes</span>
                </label>
            </div>
        </div>

Containerized execution configs

Overrides to all configurations

Per-configuration overrides

Authentication

Permissions