mrbungie commented on issue #51304: URL: https://github.com/apache/airflow/issues/51304#issuecomment-2968968409
First of all, and as always thank you so much for Apache Airflow :), I've depended on it for years for many projects. And yes, as far as I can tell we do have it installed. Some "evidence" that may help, short of showing the running system. 1. I'm using a custom docker image (but based on apache/airflow:3.0.0-python3.12) that includes this in its requirements: **apache-airflow-providers-fab==2.0.1**. This is a gist with its definition and related files: https://gist.github.com/mrbungie/ab8e2a2104e56c7d6dc8872d01d44f9a 2. I'm setting the following relevant values in my helm chart: https://gist.github.com/mrbungie/eaae9aed11d04b04d960376788d3e91e (here im showing it with webserver.defaultUser = false, but when I set it to true, the createUser fails) 3. We implemented a webserver_config.py (shown in [1] gist integrated with EntraID). And it works, so FAB is working. When I get into most containers, they do have the users subcommand: <img width="1260" alt="Image" src="https://github.com/user-attachments/assets/ee48e1aa-ec4a-49be-be7c-37fa666eddfa" /> But when checking the create-user container (after setting createUser to true), it fails. <img width="727" alt="Image" src="https://github.com/user-attachments/assets/5a486456-24c5-4d5e-a2b9-e918ea0416e3" /> <img width="1271" alt="Image" src="https://github.com/user-attachments/assets/79d1a1f3-dd36-44a3-9306-f9dd40cab6ed" /> I'm pretty sure it has to do with the fact that the env vars overriding Auth are not reaching the createUser container. create-user envvars: <img width="730" alt="Image" src="https://github.com/user-attachments/assets/abb8def2-b78c-464c-9ecd-f0317f421901" /> Meanwhile other containers (like api-server) <img width="731" alt="Image" src="https://github.com/user-attachments/assets/ea1437bb-c9c1-470c-9df1-f5f74ba42b6a" /> I guess that means that that setting (i.e. airflow.core.auth_manager / AIRFLOW__CORE__AUTH_MANAGER) **should be set exclusively via airflow.cfg**, but I think docs should be clearer about that. More info: Helm chart commit SHA256: https://github.com/apache/airflow/commit/3bd9746d5c30d47fec1e50cc95a3b83add1ee3e8 <img width="1460" alt="Image" src="https://github.com/user-attachments/assets/24d3c3b4-bbbe-4b24-8d50-d2bc194cbaa2" /> -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
