flytekit.AuthRole

class flytekit.AuthRole(assumable_iam_role=None, kubernetes_service_account=None)[source]

Either one or both of the assumable IAM role and/or the K8s service account can be set. :param Text assumable_iam_role: IAM identity with set permissions policies. :param Text kubernetes_service_account: Provides an identity for workflow execution resources.

Flyte deployment administrators are responsible for handling permissions as they relate to the service account.

Methods

classmethod from_flyte_idl(pb2_object)[source]
Parameters

pb2_object (flyteidl.admin.launch_plan_pb2.Auth) –

Return type

Auth

short_string()
Return type

Text

to_flyte_idl()[source]
Return type

flyteidl.admin.launch_plan_pb2.Auth

verbose_string()
Return type

Text

Attributes

assumable_iam_role

The IAM role to execute the workflow with :rtype: Text

is_empty
kubernetes_service_account

The kubernetes service account to execute the workflow with :rtype: Text