Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Authenticate user on Airflow web interface (GCP) #32

Closed
8 tasks done
hannelita opened this issue Jun 22, 2020 · 3 comments
Closed
8 tasks done

Authenticate user on Airflow web interface (GCP) #32

hannelita opened this issue Jun 22, 2020 · 3 comments
Assignees

Comments

@hannelita
Copy link
Contributor

hannelita commented Jun 22, 2020

We want to allow authenticated users only on the airflow GCP webserver.

Acceptance

Tasks

  • Enable basic auth
  • After Run ckanext-aircan with DAGs of this project #42 is done, check any other requirements for this task
  • On ckanext-aircan, establish a distinction between a local airflow instance and an instance on the cloud (GCP)
  • Obtain a GCP client from ckanext-aircan
  • Authenticate Client
  • Parameterize DAG name and invoke DAG on GCP via Airflow API

Analysis

Discuss other authentication methods rather than basic auth. By setting the security configuration, it is possible to allow only specific users, or groups of users, etc. Much stronger than basic HTTP Auth. In this version, we'll use Google Auth, which requires a token

@hannelita hannelita mentioned this issue Jun 22, 2020
9 tasks
@hannelita hannelita added this to the Sprint - 6 July 2020 milestone Jun 22, 2020
@hannelita hannelita self-assigned this Jun 26, 2020
@hannelita
Copy link
Contributor Author

@rufuspollock I enabled IAM Authentication and I think https://b011229e45c662be6p-tp.appspot.com is not public anymore. Is there any other type of authentication we should try?

@hannelita
Copy link
Contributor Author

ATM Blocked by #42

@hannelita
Copy link
Contributor Author

In datopian/ckanext-aircan#3, it is possible to trigger a DAG via ckanext-aircan connector
This PR fixes this issue

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant