hive-operator/examples/hive-opa-cluster.yaml at 335cc38a8ba8663f8dc7ebfc3ba1090ee3bfeabc · stackabletech/hive-operator · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
# helm install postgresql oci://registry-1.docker.io/bitnamicharts/postgresql \
#   --version 16.5.0 \
#   --namespace default \
#   --set image.repository=bitnamilegacy/postgresql \
#   --set volumePermissions.image.repository=bitnamilegacy/os-shell \
#   --set metrics.image.repository=bitnamilegacy/postgres-exporter \
#   --set global.security.allowInsecureImages=true \
#   --set auth.username=hive \
#   --set auth.password=hive \
#   --set auth.database=hive \
#   --set primary.extendedConfiguration="password_encryption=md5" \
#   --wait
---
apiVersion: hive.stackable.tech/v1alpha1
kind: HiveCluster
metadata:
  name: hive
spec:
  image:
    productVersion: 4.1.0
    pullPolicy: IfNotPresent
  clusterConfig:
    authorization:
      opa:
        configMapName: opa
        package: hms
    database:
      connString: jdbc:postgresql://postgresql:5432/hive
      credentialsSecret: hive-postgresql-credentials
      dbType: postgres
  metastore:
    roleGroups:
      default:
        replicas: 1
        config:
          resources:
            cpu:
              min: 300m
              max: "2"
            memory:
              limit: 5Gi
---
apiVersion: v1
kind: Secret
metadata:
  name: hive-postgresql-credentials
type: Opaque
stringData:
  username: hive
  password: hive
---
apiVersion: opa.stackable.tech/v1alpha1
kind: OpaCluster
metadata:
  name: opa
spec:
  image:
    productVersion: 1.8.0
  servers:
    config:
      logging:
        enableVectorAgent: false
        containers:
          opa:
            console:
              level: INFO
            file:
              level: INFO
            loggers:
              decision:
                level: INFO
    roleGroups:
      default: {}
---
apiVersion: v1
kind: ConfigMap
metadata:
  name: hive-opa-bundle
  labels:
    opa.stackable.tech/bundle: "hms"
data:
  hive.rego: |
    package hms

    database_allow = true
    table_allow = true
    column_allow = true
    partition_allow = true
    user_allow = true