This page describes the Kubernetes permissions that the W&B Launch agent requires to run jobs in your cluster. Use this information to configure role-based access control (RBAC) for the agent before you deploy it.
The following Kubernetes manifest creates a Role named wandb-launch-agent in the wandb namespace. This Role lets the agent create Pods, ConfigMaps, and Secrets, and access Pod logs in the wandb namespace. The wandb-cluster-role lets the agent create Pods, access Pod logs, create Secrets and Jobs, and check Job status across any specified namespace.
