[jira] [Commented] (AIRFLOW-1534) Allow GCP service account key file to be saved into and later read out from the sql database.
[ https://issues.apache.org/jira/browse/AIRFLOW-1534?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16190513#comment-16190513 ] Feng Lu commented on AIRFLOW-1534: -- Looks like this has been addressed by https://issues.apache.org/jira/browse/AIRFLOW-1635, closing this issue now. > Allow GCP service account key file to be saved into and later read out from > the sql database. > -- > > Key: AIRFLOW-1534 > URL: https://issues.apache.org/jira/browse/AIRFLOW-1534 > Project: Apache Airflow > Issue Type: New Feature > Components: contrib >Affects Versions: Airflow 2.0 >Reporter: Feng Lu >Assignee: Feng Lu > > For GCP connections, the service key path instead of the actual key file > content is saved into the SQL database. This implicitly assumes that the > service key location is accessible from all workers, which in practice might > be hard to achieve. This feature request adds the ability to save key file > content and later on use the saved key file in authorization. -- This message was sent by Atlassian JIRA (v6.4.14#64029)
[jira] [Commented] (AIRFLOW-1534) Allow GCP service account key file to be saved into and later read out from the sql database.
[ https://issues.apache.org/jira/browse/AIRFLOW-1534?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16190099#comment-16190099 ] Feng Lu commented on AIRFLOW-1534: -- [~nicku33]Good point, will @you in the PR. > Allow GCP service account key file to be saved into and later read out from > the sql database. > -- > > Key: AIRFLOW-1534 > URL: https://issues.apache.org/jira/browse/AIRFLOW-1534 > Project: Apache Airflow > Issue Type: New Feature > Components: contrib >Affects Versions: Airflow 2.0 >Reporter: Feng Lu >Assignee: Feng Lu > > For GCP connections, the service key path instead of the actual key file > content is saved into the SQL database. This implicitly assumes that the > service key location is accessible from all workers, which in practice might > be hard to achieve. This feature request adds the ability to save key file > content and later on use the saved key file in authorization. -- This message was sent by Atlassian JIRA (v6.4.14#64029)
[jira] [Commented] (AIRFLOW-1534) Allow GCP service account key file to be saved into and later read out from the sql database.
[ https://issues.apache.org/jira/browse/AIRFLOW-1534?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16189924#comment-16189924 ] Nicholas Ursa commented on AIRFLOW-1534: I hope the design takes into account security of this key as it is transferred from the DB to the worker node. > Allow GCP service account key file to be saved into and later read out from > the sql database. > -- > > Key: AIRFLOW-1534 > URL: https://issues.apache.org/jira/browse/AIRFLOW-1534 > Project: Apache Airflow > Issue Type: New Feature > Components: contrib >Affects Versions: Airflow 2.0 >Reporter: Feng Lu >Assignee: Feng Lu > > For GCP connections, the service key path instead of the actual key file > content is saved into the SQL database. This implicitly assumes that the > service key location is accessible from all workers, which in practice might > be hard to achieve. This feature request adds the ability to save key file > content and later on use the saved key file in authorization. -- This message was sent by Atlassian JIRA (v6.4.14#64029)
