This is an automated email from the ASF dual-hosted git repository.
pdallig pushed a commit to branch branch-0.9
in repository https://gitbox.apache.org/repos/asf/zeppelin.git
The following commit(s) were added to refs/heads/branch-0.9 by this push:
new 0cff5ef [ZEPPELIN-5464] Zeppelin server needs to obtain the
permission to create configmaps under k8s mode
0cff5ef is described below
commit 0cff5ef7191b611a056c3f731a9d92be59efabff
Author: rick <[email protected]>
AuthorDate: Wed Jul 21 16:36:01 2021 +0800
[ZEPPELIN-5464] Zeppelin server needs to obtain the permission to create
configmaps under k8s mode
### What is this PR for?
Since the spark interpreter pod need to create the resource "configmaps"
(please refer to <https://github.com/apache/zeppelin/pull/4165> for more
information), Zeppelin Server also needs to obtain relative permissions when it
is running inside k8s cluster.
### What type of PR is it?
[Bug Fix ]
### Todos
* [ ] - Task
### What is the Jira issue?
* <https://issues.apache.org/jira/browse/ZEPPELIN-5464>
### How should this be tested?
* CI pass and manually tested
### Screenshots (if appropriate)
### Questions:
* Does the licenses files need update? No
* Is there breaking changes for older versions? No
* Does this needs documentation? No
Author: rick <[email protected]>
Closes #4183 from rickchengx/ZEPPELIN-5464 and squashes the following
commits:
4e5a054f7 [rick] [ZEPPELIN-5464] Zeppelin server needs to obtain the
permission to create configmaps under k8s mode
(cherry picked from commit eb0f8ab8c07c83f054a9de23aaa4edf9239e585c)
Signed-off-by: Philipp Dallig <[email protected]>
---
k8s/zeppelin-server.yaml | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/k8s/zeppelin-server.yaml b/k8s/zeppelin-server.yaml
index 98fcf9d..8f4a400 100644
--- a/k8s/zeppelin-server.yaml
+++ b/k8s/zeppelin-server.yaml
@@ -207,7 +207,7 @@ metadata:
name: zeppelin-server-role
rules:
- apiGroups: [""]
- resources: ["pods", "services"]
+ resources: ["pods", "services", "configmaps"]
verbs: ["create", "get", "update", "patch", "list", "delete", "watch"]
- apiGroups: ["rbac.authorization.k8s.io"]
resources: ["roles", "rolebindings"]
