elyra icon indicating copy to clipboard operation
elyra copied to clipboard

When building pipelines using elyra in EMR, I have no choice but to use KUBERNETES SECRET.

Open nanaones opened this issue 2 years ago • 0 comments

Is your feature request related to a problem? Please describe.

First of all, I'm using elyra very well. Thanks to the elyra team.

I'm envisioning MLOps with elyra and designing prototypes for ETL pipelines.

However, there is one disappointment.

I am using jupyterhub and Elyra on AWS EMR. Jupyterhub above EMR is authenticating using an IAM Role. In Airflow above EKS, I want to manage authentication via IRSA, but if elyra's auth_type is AWS_IAM_ROLES_FOR_SERVICE_ACCOUNTS, Jupyterhub above EMR will also unconditionally search AWS_ROLE_ARN or AWS_WEB_IDENTITY_TOKEN_FILE, so it throws an error.

*So I have no choice but to use KUBERNETES SECRET.

In EMR, I want to use elyra through IAM Role based authentication, and in EKS I want to be authenticated through IRSA.

Describe the solution you'd like A clear and concise description of what you want to happen.

When using the pipeline, the environment where Airflow is installed should be k8s, but the environment where elyra is installed may not be k8s.

It would be nice to be able to choose separately the cos authentication of the environment where elyra is installed and the authentication of the environment where the pipeline will run.

Describe alternatives you've considered A clear and concise description of any alternative solutions or features you've considered.

I think it would have been clearer if elyra had branched according to the environment in which it was run before classifying the if statement as an authentication method.

cos.py

nanaones avatar Apr 08 '22 12:04 nanaones