GitHub user cookesan added a comment to the discussion: how can i use oauth2
for sso
For Airflow 3, configure OAuth through the FAB auth manager. In the Helm chart
that means three separate pieces:
```yaml
config:
core:
auth_manager:
airflow.providers.fab.auth_manager.fab_auth_manager.FabAuthManager
webserver:
webserverConfig: |
from flask_appbuilder.security.manager import AUTH_OAUTH
AUTH_TYPE = AUTH_OAUTH
```
Then provide the OAuth provider definition through the FAB config, for example
with `AIRFLOW__FAB__OAUTH_PROVIDERS`. Keep the client secret in a Kubernetes
secret, not as plain text in `values.yaml`; the chart has `extraSecrets`,
`extraEnv`, and `extraEnvFrom` for that shape.
The provider JSON is provider-specific, but the Airflow docs show the generic
structure: `name`, `token_key`, and a `remote_app` containing `client_id`,
`client_secret`, `api_base_url`, `access_token_url`, and `authorize_url`. After
changing it, restart the webserver/API components so the FAB webserver config
and env vars are reloaded.
GitHub link:
https://github.com/apache/airflow/discussions/65365#discussioncomment-16657265
----
This is an automatically sent email for [email protected].
To unsubscribe, please send an email to: [email protected]
