[18:00:21] jayme: of course I was wrong https://phabricator.wikimedia.org/T273507#9662694 :D [18:00:49] elukey: but you did create a pod [18:01:07] elukey: I think that is rejected immediately in any case [18:01:30] the difference is with creating API object which are not pods but create pods (like deployments) [18:02:15] I can test it as well but wouldn't it be the same? [18:02:35] that's the question :) [18:03:21] I wasn't even sure about the other question, namely if creating a pod would end up in a straight failure or not :D [18:03:55] ah, okay. Then I misunderstood - I'm pretty sure that leads to immediate failure in any case [18:04:02] even in PSP [18:04:20] and also with VAP? [18:07:24] yeah I also tested a sample nginx Deployment that uses SYS_ADMIN etc.. [18:07:49] I get a negative response from the kube api [18:09:32] ahhhh no! [18:09:42] the Deployment gets created, but I get a warning [18:10:02] wow TIL okok [18:11:56] added to the task [18:12:36] ok logging off for today, too much yaml :D [18:12:42] have a nice rest of the day folks [18:13:38] thanks for checking [18:13:42] o/