airflow-commits mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Nicholas Ursa (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (AIRFLOW-1534) Allow GCP service account key file to be saved into and later read out from the sql database.
Date Tue, 03 Oct 2017 16:20:00 GMT

    [ https://issues.apache.org/jira/browse/AIRFLOW-1534?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16189924#comment-16189924
] 

Nicholas Ursa commented on AIRFLOW-1534:
----------------------------------------

I hope the design takes into account security of this key as it is transferred from the DB
to the worker node.

> Allow GCP service account key file to be saved into and later read out from the sql database.

> ----------------------------------------------------------------------------------------------
>
>                 Key: AIRFLOW-1534
>                 URL: https://issues.apache.org/jira/browse/AIRFLOW-1534
>             Project: Apache Airflow
>          Issue Type: New Feature
>          Components: contrib
>    Affects Versions: Airflow 2.0
>            Reporter: Feng Lu
>            Assignee: Feng Lu
>
> For GCP connections, the service key path instead of the actual key file content is saved
into the SQL database. This implicitly assumes that the service key location is accessible
from all workers, which in practice might be hard to achieve. This feature request adds the
ability to save key file content and later on use the saved key file in authorization. 



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)

Mime
View raw message