kaxil commented on code in PR #74794:
URL: https://github.com/apache/airflow/pull/74794#discussion_r4517369069
##########
airflow-core/src/airflow/config_templates/config.yml:
##########
@@ -3314,6 +3314,32 @@ dag_processor:
- how often to refresh DAGs from those sources
- how many files to parse concurrently
options:
+ execution_api_token_file:
Review Comment:
Long term this should be how the processor always runs, like workers.
Workers get their token from the scheduler inside the workload, though, and
nothing trusted launches the processor, so it has to bring its own credential.
Could API mode be its own setting (off by default for now) with the token file
as one credential source, so a projected service-account token or a
workload-identity exchange can be added later without becoming another mode
switch?
@ashb what do you think?
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
