4d2a787070
Some of the users of Airflow are using Kerberos to authenticate their worker workflows. Airflow has a basic support for Kerberos for some of the operators and it has support to refresh the temporary Kerberos tokens via `airflow kerberos` command. This change adds support for the Kerberos side-car that connects to the Kerberos Key Distribution Center and retrieves the token using Keytab that should be deployed as Kubernetes Secret. It uses shared volume to share the temporary token. The nice thing about setting it up as a sidecar is that the Keytab is never shared with the workers - the secret is only mounted by the sidecar and the workers have only access to the temporary token. Depends on #11129 |
||
|---|---|---|
| .. | ||
| autoapi_templates | ||
| executor | ||
| exts | ||
| howto | ||
| img | ||
| logging-monitoring | ||
| security | ||
| static | ||
| templates | ||
| backport-providers.rst | ||
| best-practices.rst | ||
| build_docs.py | ||
| changelog.rst | ||
| cli-ref.rst | ||
| concepts.rst | ||
| conf.py | ||
| configurations-ref.rst | ||
| dag-run.rst | ||
| dag-serialization.rst | ||
| faq.rst | ||
| index.rst | ||
| installation.rst | ||
| integration.rst | ||
| kubernetes.rst | ||
| license.rst | ||
| lineage.rst | ||
| macros-ref.rst | ||
| modules_management.rst | ||
| operators-and-hooks-ref.rst | ||
| plugins.rst | ||
| privacy_notice.rst | ||
| production-deployment.rst | ||
| project.rst | ||
| redirects.txt | ||
| rest-api-ref.rst | ||
| scheduler.rst | ||
| smart-sensor.rst | ||
| spelling_wordlist.txt | ||
| stable-rest-api-ref.rst | ||
| start.rst | ||
| start_doc_server.sh | ||
| timezone.rst | ||
| tutorial.rst | ||
| ui.rst | ||
| usage-cli.rst | ||