You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@airflow.apache.org by "pykenny (via GitHub)" <gi...@apache.org> on 2024/06/13 06:05:17 UTC
[I] Provide access privilege required for `cncf.kubernetes` operators/executors [airflow]
pykenny opened a new issue, #40210:
URL: https://github.com/apache/airflow/issues/40210
### What do you see as an issue?
In `cncf-kubernetes` provider's [operator section](https://airflow.apache.org/docs/apache-airflow-providers-cncf-kubernetes/stable/operators.html#), it describes how each operator work, but does not mention what type of access privileges are required to run these operators.
Same kind of details may be needed for the two types of [Kubernetes executors](https://airflow.apache.org/docs/apache-airflow-providers-cncf-kubernetes/stable/kubernetes_executor.html) as well.
### Solving the problem
Provide privileges on Kubernetes resource required for each operator.
For instance, 3rd party `airflow_kubernetes_job_operator` packages lists out all the privileges needed to gain full functionality of the operator in their readme, in RBAC format:
- https://github.com/LamaAni/KubernetesJobOperator?tab=readme-ov-file#kubernetes-rbac-rules
### Anything else
_No response_
### Are you willing to submit PR?
- [ ] Yes I am willing to submit a PR!
### Code of Conduct
- [X] I agree to follow this project's [Code of Conduct](https://github.com/apache/airflow/blob/main/CODE_OF_CONDUCT.md)
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@airflow.apache.org.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] Provide access privilege required for `cncf.kubernetes` operators/executors [airflow]
Posted by "potiuk (via GitHub)" <gi...@apache.org>.
potiuk commented on issue #40210:
URL: https://github.com/apache/airflow/issues/40210#issuecomment-2164755137
Sure. Marked it as good-first-issue and you are free to contribute it, otherwise it will have to wait for someone to volunteer, pick it up and contribute.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@airflow.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] Provide access privilege required for `cncf.kubernetes` operators/executors [airflow]
Posted by "topherinternational (via GitHub)" <gi...@apache.org>.
topherinternational commented on issue #40210:
URL: https://github.com/apache/airflow/issues/40210#issuecomment-2282802475
@pykenny A good start might be the k8s permissions in the Helm chart, e.g. https://github.com/apache/airflow/blob/providers-cncf-kubernetes/8.3.4/chart/templates/rbac/pod-launcher-role.yaml (and others in that directory).
It's not exactly the k8s operators, but it should be a similar perms profile as what is needed to launch a task pod from the k8s executor.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@airflow.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] Provide access privilege required for `cncf.kubernetes` operators/executors [airflow]
Posted by "potiuk (via GitHub)" <gi...@apache.org>.
potiuk commented on issue #40210:
URL: https://github.com/apache/airflow/issues/40210#issuecomment-3986485585
@yranjan06 We are unassigning you from this issue as part of our updated [assignment policy](https://github.com/apache/airflow/blob/main/contributing-docs/04_how_to_contribute.rst#contribute-code-changes).
This is not meant to discourage your contribution — quite the opposite! You are still very welcome to work on this issue and submit a PR for it. Simply comment that you are working on it and open a PR when ready.
We found that formal assignments were not working well, as they often prevented others from contributing when the assignee was not actively working on the issue.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@airflow.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] Provide access privilege required for `cncf.kubernetes` operators/executors [airflow]
Posted by "yranjan06 (via GitHub)" <gi...@apache.org>.
yranjan06 commented on issue #40210:
URL: https://github.com/apache/airflow/issues/40210#issuecomment-3082049031
Hi @potiuk @xelathan ,
I’m a beginner in data engineering and Kubernetes and would love to take this up as my first contribution.
@xelathan – just checking if you’ve already started on it. If not, can I work on it?
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@airflow.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] Provide access privilege required for `cncf.kubernetes` operators/executors [airflow]
Posted by "Miretpl (via GitHub)" <gi...@apache.org>.
Miretpl closed issue #40210: Provide access privilege required for `cncf.kubernetes` operators/executors
URL: https://github.com/apache/airflow/issues/40210
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@airflow.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] Provide access privilege required for `cncf.kubernetes` operators/executors [airflow]
Posted by "xelathan (via GitHub)" <gi...@apache.org>.
xelathan commented on issue #40210:
URL: https://github.com/apache/airflow/issues/40210#issuecomment-2646640317
@potiuk I'd be happy to take on this issue if no one else is already.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@airflow.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] Provide access privilege required for `cncf.kubernetes` operators/executors [airflow]
Posted by "yranjan06 (via GitHub)" <gi...@apache.org>.
yranjan06 commented on issue #40210:
URL: https://github.com/apache/airflow/issues/40210#issuecomment-3092642046
Hi, I’ve submitted a PR to resolve this issue: https://github.com/apache/airflow/pull/53540
The PR adds a new RBAC documentation page under `providers.cncf.kubernetes` with working examples and Helm context.
Happy to improve it further based on feedback!
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@airflow.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] Provide access privilege required for `cncf.kubernetes` operators/executors [airflow]
Posted by "potiuk (via GitHub)" <gi...@apache.org>.
potiuk commented on issue #40210:
URL: https://github.com/apache/airflow/issues/40210#issuecomment-3986485978
@alectric-tr We are unassigning you from this issue as part of our updated [assignment policy](https://github.com/apache/airflow/blob/main/contributing-docs/04_how_to_contribute.rst#contribute-code-changes).
This is not meant to discourage your contribution — quite the opposite! You are still very welcome to work on this issue and submit a PR for it. Simply comment that you are working on it and open a PR when ready.
We found that formal assignments were not working well, as they often prevented others from contributing when the assignee was not actively working on the issue.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@airflow.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org