apache/airflow

Provide access privilege required for `cncf.kubernetes` operators/executors

Open

#40,210 opened on Jun 13, 2024

View on GitHub
 (7 comments) (0 reactions) (0 assignees)Python (16,781 forks)batch import
good first issuekind:documentation

Repository metrics

Stars
 (44,809 stars)
PR merge metrics
 (Avg merge 7d 18h) (834 merged PRs in 30d)

Description

What do you see as an issue?

In cncf-kubernetes provider's operator section, it describes how each operator work, but does not mention what type of access privileges are required to run these operators.

Same kind of details may be needed for the two types of Kubernetes executors as well.

Solving the problem

Provide privileges on Kubernetes resource required for each operator.

For instance, in 3rd-party airflow_kubernetes_job_operator package, it lists out all the privileges needed to gain full functionality of their operator in readme, written in RBAC format:

Anything else

No response

Are you willing to submit PR?

  • Yes I am willing to submit a PR!

Code of Conduct

Contributor guide

Research direction
Research Kubernetes RBAC rules for each operator and executor in the cncf kubernetes provider. Then document required access privileges in the operator and executor sections of the documentation.
Tech stack
pythonkubernetes
Domain
backenddevops
Issue type
Documentation
DifficultyEstimated implementation difficulty for a new contributor, from 1 for very small changes to 5 for expert-level work.
2
Estimated timeA rough time range for an experienced contributor to investigate, implement, test, and prepare a pull request.
Half day
Activity statusHow available the issue appears right now: fresh, active, stale, blocked, or waiting on maintainer input.
Active
ClarityHow clearly the issue explains the expected change, acceptance criteria, and next step.
Clear
Prerequisites
KubernetesAirflow
Newbie friendlinessA 1-100 score estimating how approachable this issue is for first-time contributors.
65