csm10495 opened a new issue, #51561:
URL: https://github.com/apache/airflow/issues/51561

   ### Description
   
   Right now, we can set a cert and key but I don't think we can set a 
truststore/cabundle to verify against. This is particularly important if we are 
using self-signed certificates.
   
   We have AIRFLOW__API__SSL_CERT and another for key. We sort of need one for 
a verify bundle though it's kind of odd because I think components besides the 
API server would use it (since they call the API server)
   
   
   ### Use case/motivation
   
   Enterprise environments may use self signed ssl certs and therefore require 
the ability to use a custom cabundle for internal verification between 
components. (Like other airflow components talking to the API server)
   
   ### Related issues
   
   https://github.com/apache/airflow/discussions/50726
   Though I don't think this is a great solution since it just makes a new 
docker image and concatenates special verifies on top of the default ones. In 
my case we would likely want to just specify a trust store with the known 
verify bundle.
   
   ### Are you willing to submit a PR?
   
   - [ ] Yes I am willing to submit a PR!
   
   ### Code of Conduct
   
   - [x] I agree to follow this project's [Code of 
Conduct](https://github.com/apache/airflow/blob/main/CODE_OF_CONDUCT.md)
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: commits-unsubscr...@airflow.apache.org.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org

Reply via email to