Hey - I'm wondering about additional job manifest specifications in the context of our metaflow/airflow/eks stack. Specifically I need to set container and pod security contexts. Are hooks for that configuration exposed with something we can pass into

train_flow.py

or do you have a suggestion for how we should inject changes into the resulting dag?

Are you running opa or kyverno? One option would be to add a policy that assigns the security context to every container and pod. We can also look into providing configuration support within Metaflow in the absence of policy management engines

We do run kyverno so I could inject at admission. Generally I prefer to fully spec manifests but I can scope the policy to this particular use case.

I have created a GH issue to track progress - https://github.com/Netflix/metaflow/issues/1262