|
| 1 | +# For now, on K8s 1.35, TrinoCatalogs need to be deployed before the TrinoCluster |
| 2 | +# See: https://github.com/stackabletech/trino-operator/issues/854 |
| 3 | +--- |
| 4 | +apiVersion: trino.stackable.tech/v1alpha1 |
| 5 | +kind: TrinoCatalog |
| 6 | +metadata: |
| 7 | + name: lakehouse |
| 8 | + labels: |
| 9 | + trino: trino |
| 10 | +spec: |
| 11 | + connector: |
| 12 | + iceberg: |
| 13 | + metastore: |
| 14 | + configMap: hive-iceberg |
| 15 | + hdfs: |
| 16 | + configMap: hdfs |
| 17 | + configOverrides: |
| 18 | + # HDFS configuration |
| 19 | + hive.hdfs.authentication.type: KERBEROS |
| 20 | + hive.hdfs.trino.principal: trino/trino.default.svc.cluster.local@KNAB.COM |
| 21 | + hive.hdfs.trino.keytab: /stackable/kerberos/keytab |
| 22 | + hive.hdfs.impersonation.enabled: "false" |
| 23 | + hive.hdfs.wire-encryption.enabled: "true" |
| 24 | + # HMS configuration |
| 25 | + hive.metastore.authentication.type: KERBEROS |
| 26 | + hive.metastore.client.principal: trino/trino.default.svc.cluster.local@KNAB.COM |
| 27 | + hive.metastore.client.keytab: /stackable/kerberos/keytab |
| 28 | + hive.metastore.service.principal: hive/hive-iceberg.default.svc.cluster.local@KNAB.COM |
| 29 | + hive.metastore.thrift.impersonation.enabled: "false" |
| 30 | + # By default, Hive views are executed with the RUN AS DEFINER security mode. Set the hive.hive-views.run-as-invoker catalog configuration property to true to use RUN AS INVOKER semantics. |
| 31 | + # However, this does *not* work for Iceberg catalogs :/ (I asked on the Trino slack: https://trinodb.slack.com/archives/CJ6UC075E/p1711449384648869) |
| 32 | + # hive.hive-views.run-as-invoker: "true" |
| 33 | +--- |
| 34 | +apiVersion: trino.stackable.tech/v1alpha1 |
| 35 | +kind: TrinoCatalog |
| 36 | +metadata: |
| 37 | + name: tpcds |
| 38 | + labels: |
| 39 | + trino: trino |
| 40 | +spec: |
| 41 | + connector: |
| 42 | + tpcds: {} |
| 43 | +--- |
| 44 | +apiVersion: trino.stackable.tech/v1alpha1 |
| 45 | +kind: TrinoCatalog |
| 46 | +metadata: |
| 47 | + name: tpch |
| 48 | + labels: |
| 49 | + trino: trino |
| 50 | +spec: |
| 51 | + connector: |
| 52 | + tpch: {} |
1 | 53 | --- |
2 | 54 | apiVersion: trino.stackable.tech/v1alpha1 |
3 | 55 | kind: TrinoCluster |
@@ -67,56 +119,6 @@ spec: |
67 | 119 | default: |
68 | 120 | replicas: 1 |
69 | 121 | --- |
70 | | -apiVersion: trino.stackable.tech/v1alpha1 |
71 | | -kind: TrinoCatalog |
72 | | -metadata: |
73 | | - name: lakehouse |
74 | | - labels: |
75 | | - trino: trino |
76 | | -spec: |
77 | | - connector: |
78 | | - iceberg: |
79 | | - metastore: |
80 | | - configMap: hive-iceberg |
81 | | - hdfs: |
82 | | - configMap: hdfs |
83 | | - configOverrides: |
84 | | - # HDFS configuration |
85 | | - hive.hdfs.authentication.type: KERBEROS |
86 | | - hive.hdfs.trino.principal: trino/trino.default.svc.cluster.local@KNAB.COM |
87 | | - hive.hdfs.trino.keytab: /stackable/kerberos/keytab |
88 | | - hive.hdfs.impersonation.enabled: "false" |
89 | | - hive.hdfs.wire-encryption.enabled: "true" |
90 | | - # HMS configuration |
91 | | - hive.metastore.authentication.type: KERBEROS |
92 | | - hive.metastore.client.principal: trino/trino.default.svc.cluster.local@KNAB.COM |
93 | | - hive.metastore.client.keytab: /stackable/kerberos/keytab |
94 | | - hive.metastore.service.principal: hive/hive-iceberg.default.svc.cluster.local@KNAB.COM |
95 | | - hive.metastore.thrift.impersonation.enabled: "false" |
96 | | - # By default, Hive views are executed with the RUN AS DEFINER security mode. Set the hive.hive-views.run-as-invoker catalog configuration property to true to use RUN AS INVOKER semantics. |
97 | | - # However, this does *not* work for Iceberg catalogs :/ (I asked on the Trino slack: https://trinodb.slack.com/archives/CJ6UC075E/p1711449384648869) |
98 | | - # hive.hive-views.run-as-invoker: "true" |
99 | | ---- |
100 | | -apiVersion: trino.stackable.tech/v1alpha1 |
101 | | -kind: TrinoCatalog |
102 | | -metadata: |
103 | | - name: tpcds |
104 | | - labels: |
105 | | - trino: trino |
106 | | -spec: |
107 | | - connector: |
108 | | - tpcds: {} |
109 | | ---- |
110 | | -apiVersion: trino.stackable.tech/v1alpha1 |
111 | | -kind: TrinoCatalog |
112 | | -metadata: |
113 | | - name: tpch |
114 | | - labels: |
115 | | - trino: trino |
116 | | -spec: |
117 | | - connector: |
118 | | - tpch: {} |
119 | | ---- |
120 | 122 | apiVersion: v1 |
121 | 123 | kind: Secret |
122 | 124 | metadata: |
|
0 commit comments