deployments/examples/authz/placement-rules/yunikorn-configs.yaml

#
# Licensed to the Apache Software Foundation (ASF) under one
# or more contributor license agreements.  See the NOTICE file
# distributed with this work for additional information
# regarding copyright ownership.  The ASF licenses this file
# to you under the Apache License, Version 2.0 (the
# "License"); you may not use this file except in compliance
# with the License.  You may obtain a copy of the License at
#
#      http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.

kind: ConfigMap
metadata:
  name: yunikorn-configs
  namespace: yunikorn
apiVersion: v1
data:
  admissionController.accessControl.externalGroups: "admin,group-a,group-b"
  queues.yaml: |
    partitions: 
      - name: default
        placementrules:
          - name: provided
            create: true
            filter:
                type: allow
                users:
                  - admin
                groups:
                  - admin
            parent:
              name: fixed
              value: root.system
          - name: user
            create: true
            filter:
              type: allow
              groups:
                - group-a
            parent:
              name: fixed
              value: root.tenants.group-a
          - name: tag
            value: namespace
            create: true
            filter:
              type: allow
              groups:
                - group-b
            parent:
              name: fixed
              value: root.tenants.group-b
        queues:
          - name: root
            queues:
            - name: system
              adminacl: " admin"
              parent: true
            - name: tenants
              parent: true
              queues:
                - name: group-a
                  adminacl: " group-a"
                  parent: true
                - name: group-b
                  adminacl: " group-b"
                  parent: true