updated airflow roles
This commit is contained in:
parent
196ba0b54a
commit
c9c80ad9b9
|
@ -42,7 +42,7 @@ config:
|
||||||
logging:
|
logging:
|
||||||
remote_logging: "True"
|
remote_logging: "True"
|
||||||
logging_level: "INFO"
|
logging_level: "INFO"
|
||||||
remote_base_log_folder: "s3://lot1-airflow/logs"
|
remote_base_log_folder: "s3://dnet-airflow/logs"
|
||||||
remote_log_conn_id: "s3_conn"
|
remote_log_conn_id: "s3_conn"
|
||||||
encrypt_s3_logs: "False"
|
encrypt_s3_logs: "False"
|
||||||
|
|
||||||
|
|
|
@ -13,47 +13,47 @@ resource "kubernetes_namespace" "spark_jobs_namespace" {
|
||||||
# }
|
# }
|
||||||
# }
|
# }
|
||||||
#
|
#
|
||||||
# resource "kubernetes_role" "airflow_spark_role" {
|
resource "kubernetes_role" "airflow_spark_role" {
|
||||||
# depends_on = [kubernetes_namespace.spark_jobs_namespace]
|
depends_on = [kubernetes_namespace.spark_jobs_namespace]
|
||||||
# metadata {
|
metadata {
|
||||||
# name = "airflow-spark-role"
|
name = "airflow-spark-role"
|
||||||
# namespace = "${var.namespace_prefix}spark-jobs"
|
namespace = "${var.namespace_prefix}spark-jobs"
|
||||||
# }
|
}
|
||||||
#
|
|
||||||
# rule {
|
rule {
|
||||||
# api_groups = ["sparkoperator.k8s.io"]
|
api_groups = ["sparkoperator.k8s.io"]
|
||||||
# resources = ["sparkapplications", "sparkapplications/status",
|
resources = ["sparkapplications", "sparkapplications/status",
|
||||||
# "scheduledsparkapplications", "scheduledsparkapplications/status"]
|
"scheduledsparkapplications", "scheduledsparkapplications/status"]
|
||||||
# verbs = ["*"]
|
verbs = ["*"]
|
||||||
# }
|
}
|
||||||
#
|
|
||||||
# rule {
|
rule {
|
||||||
# api_groups = [""]
|
api_groups = [""]
|
||||||
# resources = ["pods/log"]
|
resources = ["pods/log"]
|
||||||
# verbs = ["*"]
|
verbs = ["*"]
|
||||||
# }
|
}
|
||||||
# }
|
}
|
||||||
#
|
|
||||||
# resource "kubernetes_role_binding_v1" "airflow_spark_role_binding" {
|
resource "kubernetes_role_binding_v1" "airflow_spark_role_binding" {
|
||||||
# depends_on = [kubernetes_namespace.spark_jobs_namespace]
|
depends_on = [kubernetes_namespace.spark_jobs_namespace]
|
||||||
# metadata {
|
metadata {
|
||||||
# name = "airflow-spark-role-binding"
|
name = "airflow-spark-role-binding"
|
||||||
# namespace = "${var.namespace_prefix}spark-jobs"
|
namespace = "${var.namespace_prefix}spark-jobs"
|
||||||
# }
|
}
|
||||||
#
|
|
||||||
# subject {
|
subject {
|
||||||
# kind = "ServiceAccount"
|
kind = "ServiceAccount"
|
||||||
# name = "airflow-worker"
|
name = "airflow-worker"
|
||||||
# namespace = "${var.namespace_prefix}airflow"
|
namespace = "${var.namespace_prefix}airflow"
|
||||||
# }
|
}
|
||||||
#
|
|
||||||
# role_ref {
|
role_ref {
|
||||||
# api_group = "rbac.authorization.k8s.io"
|
api_group = "rbac.authorization.k8s.io"
|
||||||
# kind = "Role"
|
kind = "Role"
|
||||||
# name = "airflow-spark-role"
|
name = "airflow-spark-role"
|
||||||
# }
|
}
|
||||||
# }
|
}
|
||||||
#
|
|
||||||
resource "kubernetes_role_binding_v1" "airflow_spark_role_binding2" {
|
resource "kubernetes_role_binding_v1" "airflow_spark_role_binding2" {
|
||||||
depends_on = [kubernetes_namespace.spark_jobs_namespace]
|
depends_on = [kubernetes_namespace.spark_jobs_namespace]
|
||||||
metadata {
|
metadata {
|
||||||
|
|
Loading…
Reference in New Issue