Kerberos Authentication for HTTP tasks
- Dominant language
- Python
- Stars
- 46.9k
- Forks
- 17.8k
- Avg merge
- 2d 9h
- Merged PRs (30d)
- 472
Description
### Description
The airflow core module `airflow.security.kerberos` implements keytab based kerberos authentication for the webserver, but this authentication cannot easily be used in tasks because it only supports one keytab and principal, and no service.
We should add the ability to create kerberos tickets through kinit for different keytabs and principals during tasks and pass them to the HttpOperator as bearer auth. This would allow kerberos credentials to be managed as connections, and for dag authors to define simple REST tasks using kerberos authentication without needing to handle the reinitialisation of the kerberos tickets.
see PR #60990
### Use case/motivation
Calling HTTP REST services using Kerberos authentication
### Related issues
_No response_
### Are you willing to submit a PR?
- [x] Yes I am willing to submit a PR!
### Code of Conduct
- [x] I agree to follow this project's [Code of Conduct](https://github.com/apache/airflow/blob/main/CODE_OF_CONDUCT.md)
Contributor guide
Assessment
This issue has not been assessed yet.