tldr - powered by Generative AI

• Ohio Supercomputer Center uses Open OnDemand and Kubernetes for virtual classrooms running RStudio Server and Jupyter
• Challenges include shared file system access and ensuring user processes run with correct uid and gid
• Design patterns include user pods in namespaces with user prefix and access control roles
• Kyverno policies ensure uid and gid match user's LDAP record, restrict host path access, disallow privilege escalation, and enforce max resource requests and runtime
• An anecdote is not provided in the presentation