flink-user mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Yang Wang <danrtsey...@gmail.com>
Subject Re: [EXTERNAL] Re: Native K8S IAM Role?
Date Mon, 29 Jun 2020 03:09:04 GMT
Using a webhook is really a good direction to support some unreleased Flink
native
k8s features. We are doing the same thing internally.


Best,
Yang

Bohinski, Kevin <Kevin_Bohinski@comcast.com> 于2020年6月29日周一 上午3:09写道:

> Hi Yang,
>
>
>
> Awesome, looking forward to 1.11!
>
> In the meantime, we are using a mutating web hook in case anyone else is
> facing this...
>
>
>
> Best,
>
> kevin
>
>
>
>
>
> *From: *Yang Wang <danrtsey.wy@gmail.com>
> *Date: *Saturday, June 27, 2020 at 11:23 PM
> *To: *"Bohinski, Kevin" <Kevin_Bohinski@comcast.com>
> *Cc: *"user@flink.apache.org" <user@flink.apache.org>
> *Subject: *[EXTERNAL] Re: Native K8S IAM Role?
>
>
>
> Hi kevin,
>
>
>
> If you mean to add annotations for Flink native K8s session pods, you
> could use "kubernetes.jobmanager.annotations"
>
> and "kubernetes.taskmanager.annotations"[1]. However, they are only
> supported from release-1.11. Maybe you could
>
> wait for a little bit more time, 1.11 will be released soon. And we add
> more features for native K8s integration in 1.11
>
> (e.g. application mode, label, annotation, toleration, etc.).
>
>
>
>
>
> [1].
> https://ci.apache.org/projects/flink/flink-docs-master/ops/config.html#kubernetes
> <https://urldefense.com/v3/__https:/ci.apache.org/projects/flink/flink-docs-master/ops/config.html*kubernetes__;Iw!!CQl3mcHX2A!ULDBt0kuUlwSJPYMoWXSBl4cXonhzeMiAFpUtVsP4Am1G77FpT6rl8o35FxdplLVN6GdDQ$>
>
>
>
> Best,
>
> Yang
>
>
>
> Bohinski, Kevin <Kevin_Bohinski@comcast.com> 于2020年6月26日周五 上午3:09写道:
>
> Hi,
>
>
>
> How do we attach an IAM role to the native K8S sessions?
>
>
>
> Typically for our other pods we use the following in our yamls:
>
> spec:
>
>   template:
>
>     metadata:
>
>       annotations:
>
>         iam.amazonaws.com/role
> <https://urldefense.com/v3/__http:/iam.amazonaws.com/role__;!!CQl3mcHX2A!ULDBt0kuUlwSJPYMoWXSBl4cXonhzeMiAFpUtVsP4Am1G77FpT6rl8o35FxdplKlhJ55SA$>:
> ROLE_ARN
>
>
>
> Best
>
> kevin
>
>

Mime
View raw message