apache / apache/airflow

Kerberos Authentication for HTTP tasks

Open
#60,991 3 comments 0 reactions 0 assignees View on GitHub
area:core kind:feature needs-triage
Dominant language
Python
Stars
46.9k
Forks
17.8k
Avg merge
2d 9h
Merged PRs (30d)
472

Description

### Description

The airflow core module `airflow.security.kerberos` implements keytab based kerberos authentication for the webserver, but this authentication cannot easily be used in tasks because it only supports one keytab and principal, and no service.
We should add the ability to create kerberos tickets through kinit for different keytabs and principals during tasks and pass them to the HttpOperator as bearer auth. This would allow kerberos credentials to be managed as connections, and for dag authors to define simple REST tasks using kerberos authentication without needing to handle the reinitialisation of the kerberos tickets.

see PR #60990

### Use case/motivation

Calling HTTP REST services using Kerberos authentication

### Related issues

_No response_

### Are you willing to submit a PR?

- [x] Yes I am willing to submit a PR!

### Code of Conduct

- [x] I agree to follow this project's [Code of Conduct](https://github.com/apache/airflow/blob/main/CODE_OF_CONDUCT.md)

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.