dondaum commented on issue #17604:
URL: https://github.com/apache/airflow/issues/17604#issuecomment-898612407


   Thank you both for your respond and showing me a quick workaroung. 
   
   I'll implement it and test it against our custom solution. We do something 
similar by override the execute() method and apply a kind of custom masking on 
the remote_pod object. 
   
   Yes we could use kubernetes secrets for our use cases as well. I assume 
there are pros and cons for using secrets. To my knowledge it was not possible 
to create secrets 'on the fly' with an instance of the KubernetesPodOperator 
for just running the specific task and afterwards remove it. Even if you could, 
you still would generate a secret per task instance or have a logic that check 
if a secret already exist and so on. Yes we could simply create this secret 
once and then use it but it would be inflexible if we want to change some 
values here and there as we then always need to change the secret.
   
   At the moment (see example above) we use a V1EnvVar model instance and pass 
it to the KubernetesPodOperator. 


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: commits-unsubscr...@airflow.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org


Reply via email to