We need our Airflow deployments to be able to authenticate through our Kerberos server, and regularly renew its token. This ticket acts as an umbrella for the subtasks.
Description
Description
| Status | Subtype | Assigned | Task | ||
|---|---|---|---|---|---|
| Resolved | brouberol | T362788 Migrate Airflow to the dse-k8s cluster | |||
| Resolved | BTullis | T375871 Integrate Airflow with Kerberos | |||
| Resolved | brouberol | T375872 Decide whether we will use our own kerberos-kinit image or the `airflow kerberos` command | |||
| Resolved | brouberol | T375875 Deploy the kerberos token renewer in the Airflow chart | |||
| Resolved | • Stevemunene | T375877 Issue a principal and a keytab to the airflow-test-k8s instance | |||
| Resolved | brouberol | T375716 Ensure the Airflow API can be reached out to from within Kubernetes and is authenticated | |||
| Declined | brouberol | T377952 Ensure that the airflow API can only be called from our production subnet |