You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@zeppelin.apache.org by pd...@apache.org on 2021/08/09 11:42:01 UTC
[zeppelin] branch master updated: [ZEPPELIN-5464] Zeppelin server
needs to obtain the permission to create configmaps under k8s mode
This is an automated email from the ASF dual-hosted git repository.
pdallig pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/zeppelin.git
The following commit(s) were added to refs/heads/master by this push:
new eb0f8ab [ZEPPELIN-5464] Zeppelin server needs to obtain the permission to create configmaps under k8s mode
eb0f8ab is described below
commit eb0f8ab8c07c83f054a9de23aaa4edf9239e585c
Author: rick <ri...@rickdeMacBook-Pro.local>
AuthorDate: Wed Jul 21 16:36:01 2021 +0800
[ZEPPELIN-5464] Zeppelin server needs to obtain the permission to create configmaps under k8s mode
### What is this PR for?
Since the spark interpreter pod need to create the resource "configmaps" (please refer to <https://github.com/apache/zeppelin/pull/4165> for more information), Zeppelin Server also needs to obtain relative permissions when it is running inside k8s cluster.
### What type of PR is it?
[Bug Fix ]
### Todos
* [ ] - Task
### What is the Jira issue?
* <https://issues.apache.org/jira/browse/ZEPPELIN-5464>
### How should this be tested?
* CI pass and manually tested
### Screenshots (if appropriate)
### Questions:
* Does the licenses files need update? No
* Is there breaking changes for older versions? No
* Does this needs documentation? No
Author: rick <ri...@rickdeMacBook-Pro.local>
Closes #4183 from rickchengx/ZEPPELIN-5464 and squashes the following commits:
4e5a054f7 [rick] [ZEPPELIN-5464] Zeppelin server needs to obtain the permission to create configmaps under k8s mode
---
k8s/zeppelin-server.yaml | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/k8s/zeppelin-server.yaml b/k8s/zeppelin-server.yaml
index a60d3e5..2988b6f 100644
--- a/k8s/zeppelin-server.yaml
+++ b/k8s/zeppelin-server.yaml
@@ -207,7 +207,7 @@ metadata:
name: zeppelin-server-role
rules:
- apiGroups: [""]
- resources: ["pods", "services"]
+ resources: ["pods", "services", "configmaps"]
verbs: ["create", "get", "update", "patch", "list", "delete", "watch"]
- apiGroups: ["rbac.authorization.k8s.io"]
resources: ["roles", "rolebindings"]