You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@airflow.apache.org by GitBox <gi...@apache.org> on 2021/05/19 15:44:54 UTC
[GitHub] [airflow] kevinbsilva opened a new pull request #15947: Applied permissions to self._error_file
kevinbsilva opened a new pull request #15947:
URL: https://github.com/apache/airflow/pull/15947
As explained at the issue [#15946](https://github.com/apache/airflow/issues/15946) the Web UI does not show the log for tasks that failed when the owner of the DAG is not airflow or the DAG is being executed by another user (run_as_user parameter). When airflow is dumping the error to the temporary file, it opens the file for writing and raises a Permission Denied error, since it's created with restricted permissions. Any default user cannot write into the file, only read.
The NamedTemporaryFile created at the base_task_runner creates the file with the umask 600 and that module does not allow to pass custom permissions when creating the object.
To avoid this problem, i've added a os.chmod after creating the NamedTemporaryFile at the base_task_runner module. After that, no Permission Denied is thrown when a task fails and the log is accessible through the Web UI.
No major changes were made, only the chmod being applied solved the problem.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [airflow] ashb commented on pull request #15947: Applied permissions to self._error_file
Posted by GitBox <gi...@apache.org>.
ashb commented on pull request #15947:
URL: https://github.com/apache/airflow/pull/15947#issuecomment-973923460
Airflow _might not_ be able to sudo as root, but only sudo as a specific user :(
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@airflow.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [airflow] potiuk edited a comment on pull request #15947: Applied permissions to self._error_file
Posted by GitBox <gi...@apache.org>.
potiuk edited a comment on pull request #15947:
URL: https://github.com/apache/airflow/pull/15947#issuecomment-847727979
I believe this is quite wrong approach. The right solution should be setting the Umask properly for Airflow deployment. The user that you use with "run as user" should be in the same group as the "airflow user" and umask should be set so that the file is group readable (at least - possibly group writeable).
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [airflow] potiuk edited a comment on pull request #15947: Applied permissions to self._error_file
Posted by GitBox <gi...@apache.org>.
potiuk edited a comment on pull request #15947:
URL: https://github.com/apache/airflow/pull/15947#issuecomment-847727979
Agree with @uranusjr . I believe this is quite wrong approach. The right solution should be setting the Umask properly for Airflow deployment. The user that you use with "run as user" should be in the same group as the "airflow user" and umask should be set so that the file is group readable (at least - possibly group writeable).
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [airflow] kevinbsilva commented on pull request #15947: Applied permissions to self._error_file
Posted by GitBox <gi...@apache.org>.
kevinbsilva commented on pull request #15947:
URL: https://github.com/apache/airflow/pull/15947#issuecomment-859512972
@jhtimmins i'm looking into it. Thank you, will update as soon as possible.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [airflow] jhtimmins commented on pull request #15947: Applied permissions to self._error_file
Posted by GitBox <gi...@apache.org>.
jhtimmins commented on pull request #15947:
URL: https://github.com/apache/airflow/pull/15947#issuecomment-858108373
@kevinbsilva I think it received a 404 because the URL referenced `master`, which has recently been renamed `main`.
@potiuk can you take a look and confirm whether your requested changes have been addressed?
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [airflow] kevinbsilva commented on pull request #15947: Applied permissions to self._error_file
Posted by GitBox <gi...@apache.org>.
kevinbsilva commented on pull request #15947:
URL: https://github.com/apache/airflow/pull/15947#issuecomment-855932744
Thank you for the tip! So, instead of using os.chmod we would use os.chown, right? This would avoid every user having access to the file. I will change that. Many thanks!
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [airflow] potiuk commented on pull request #15947: Applied permissions to self._error_file
Posted by GitBox <gi...@apache.org>.
potiuk commented on pull request #15947:
URL: https://github.com/apache/airflow/pull/15947#issuecomment-973213231
It does look suspiciously wrong here. I think it will only work is airflow is run as root
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@airflow.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [airflow] potiuk commented on pull request #15947: Applied permissions to self._error_file
Posted by GitBox <gi...@apache.org>.
potiuk commented on pull request #15947:
URL: https://github.com/apache/airflow/pull/15947#issuecomment-973213856
@kacpwoja - maybe you can add PR to fix it (unless someone explains why it WOULD work of course)
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@airflow.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [airflow] ashb commented on pull request #15947: Applied permissions to self._error_file
Posted by GitBox <gi...@apache.org>.
ashb commented on pull request #15947:
URL: https://github.com/apache/airflow/pull/15947#issuecomment-973922970
Oh yeah, that is my bad. I entirely forgot that even if you own the file currently you can't change the owner unless you are root 🤦🏻
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@airflow.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [airflow] potiuk edited a comment on pull request #15947: Applied permissions to self._error_file
Posted by GitBox <gi...@apache.org>.
potiuk edited a comment on pull request #15947:
URL: https://github.com/apache/airflow/pull/15947#issuecomment-973935741
I think the only solution is to create the file in a separate `[sudo] (touch; chmod o+r)` command and remove the file in `finally` clause (also with sudo). We can generate the temp file name with one of the uuids to make high probability that it's unique.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@airflow.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [airflow] kacpwoja commented on pull request #15947: Applied permissions to self._error_file
Posted by GitBox <gi...@apache.org>.
kacpwoja commented on pull request #15947:
URL: https://github.com/apache/airflow/pull/15947#issuecomment-973980769
> Airflow _might not_ be able to sudo as root, but only sudo as a specific user :(
But airflow already needs sudo permissions for chown anyway, as it uses it 20 lines before in the same file:
`subprocess.call(['sudo', 'chown', self.run_as_user, cfg_path], close_fds=True)`
If I recall correctly, Airflow also needs sudo permissions for rm and kill.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@airflow.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [airflow] potiuk commented on pull request #15947: Applied permissions to self._error_file
Posted by GitBox <gi...@apache.org>.
potiuk commented on pull request #15947:
URL: https://github.com/apache/airflow/pull/15947#issuecomment-973935741
I think the only solution is to create the file in a separate `[sudo] (touch; chmod o+r)` command and remove the file in `finally` clause (also with sudo).
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@airflow.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [airflow] kevinbsilva commented on pull request #15947: Applied permissions to self._error_file
Posted by GitBox <gi...@apache.org>.
kevinbsilva commented on pull request #15947:
URL: https://github.com/apache/airflow/pull/15947#issuecomment-856397058
@ashb i've tested in our development cluster and it works fine. But it seems a check from GitHub actions did not succeed. It raised a 404 when trying to install the Airflow.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [airflow] ashb merged pull request #15947: Applied permissions to self._error_file
Posted by GitBox <gi...@apache.org>.
ashb merged pull request #15947:
URL: https://github.com/apache/airflow/pull/15947
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@airflow.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [airflow] kevinbsilva commented on pull request #15947: Applied permissions to self._error_file
Posted by GitBox <gi...@apache.org>.
kevinbsilva commented on pull request #15947:
URL: https://github.com/apache/airflow/pull/15947#issuecomment-885699720
@ephraimbuddy my mistake. I've read about the static checks and after executing some of the pre-commits, it is ok (mainly black and isort).
I am getting errors from the MSSQL Build, but it don't seems that has any connection with the code update.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@airflow.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [airflow] jhtimmins commented on pull request #15947: Applied permissions to self._error_file
Posted by GitBox <gi...@apache.org>.
jhtimmins commented on pull request #15947:
URL: https://github.com/apache/airflow/pull/15947#issuecomment-858802569
@kevinbsilva looks like these are legit test failures that need to be addressed https://github.com/apache/airflow/pull/15947/checks?check_run_id=2794600747#step:6:14114
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [airflow] ashb commented on pull request #15947: Applied permissions to self._error_file
Posted by GitBox <gi...@apache.org>.
ashb commented on pull request #15947:
URL: https://github.com/apache/airflow/pull/15947#issuecomment-847925477
Could this also be achieved by opening the file as airflow, before switching user and then changing the owner? That way the `airflow` process already has an open file handle and can just re-wind the filehandle to read it.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [airflow] kacpwoja commented on pull request #15947: Applied permissions to self._error_file
Posted by GitBox <gi...@apache.org>.
kacpwoja commented on pull request #15947:
URL: https://github.com/apache/airflow/pull/15947#issuecomment-973903968
Yes, exactly as you said, it only works when airflow is run as root. When it's not, the tasks fail before they even start. I think we can use subprocess.call to invoke chown with sudo instead of using os.chown, just like a few lines above. I'll make a PR to fix this
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@airflow.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [airflow] ephraimbuddy commented on pull request #15947: Applied permissions to self._error_file
Posted by GitBox <gi...@apache.org>.
ephraimbuddy commented on pull request #15947:
URL: https://github.com/apache/airflow/pull/15947#issuecomment-885683495
@kevinbsilva please install pre-commit. That would be very helpful
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@airflow.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [airflow] uranusjr edited a comment on pull request #15947: Applied permissions to self._error_file
Posted by GitBox <gi...@apache.org>.
uranusjr edited a comment on pull request #15947:
URL: https://github.com/apache/airflow/pull/15947#issuecomment-846516716
Setting the execution bit looks extremely wrong to me. At the very least this should be `0o644` instead, but even that I’m not sure is the correct fix. Why does this only affect failed tasks? There are many unanswered questions between the issue report and the fix here.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [airflow] potiuk edited a comment on pull request #15947: Applied permissions to self._error_file
Posted by GitBox <gi...@apache.org>.
potiuk edited a comment on pull request #15947:
URL: https://github.com/apache/airflow/pull/15947#issuecomment-847727979
I believe this is quite wrong approach. The right solution should be setting the Umask properly for Airflow deployment. The user that you use "run as user" should be in the same group as the "airflow user" and umask should be set so that the file is group readable (at least - possibly group writeable).
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [airflow] potiuk edited a comment on pull request #15947: Applied permissions to self._error_file
Posted by GitBox <gi...@apache.org>.
potiuk edited a comment on pull request #15947:
URL: https://github.com/apache/airflow/pull/15947#issuecomment-973935741
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@airflow.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [airflow] ashb commented on pull request #15947: Applied permissions to self._error_file
Posted by GitBox <gi...@apache.org>.
ashb commented on pull request #15947:
URL: https://github.com/apache/airflow/pull/15947#issuecomment-856053821
@kevinbsilva Does it work now? I _think_ this should, but could you confirm?
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [airflow] github-actions[bot] commented on pull request #15947: Applied permissions to self._error_file
Posted by GitBox <gi...@apache.org>.
github-actions[bot] commented on pull request #15947:
URL: https://github.com/apache/airflow/pull/15947#issuecomment-858587874
The PR most likely needs to run full matrix of tests because it modifies parts of the core of Airflow. However, committers might decide to merge it quickly and take the risk. If they don't merge it quickly - please rebase it to the latest main at your convenience, or amend the last commit of the PR, and push it with --force-with-lease.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [airflow] kevinbsilva edited a comment on pull request #15947: Applied permissions to self._error_file
Posted by GitBox <gi...@apache.org>.
kevinbsilva edited a comment on pull request #15947:
URL: https://github.com/apache/airflow/pull/15947#issuecomment-885699720
@ephraimbuddy my mistake. I've read about the static checks and after executing some of the pre-commits, it is ok (mainly black and isort). Thank you very much!
I am getting errors from the MSSQL Build, but it don't seems that has any connection with the code update.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@airflow.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [airflow] ashb commented on a change in pull request #15947: Applied permissions to self._error_file
Posted by GitBox <gi...@apache.org>.
ashb commented on a change in pull request #15947:
URL: https://github.com/apache/airflow/pull/15947#discussion_r701816391
##########
File path: airflow/task/task_runner/base_task_runner.py
##########
@@ -85,6 +86,12 @@ def __init__(self, local_task_job):
cfg_path = tmp_configuration_copy(chmod=0o600)
self._error_file = NamedTemporaryFile(delete=True)
+ if self.run_as_user:
+ try:
+ os.chown(self._error_file.name, getpwnam(self.run_as_user).pw_uid, -1)
+ except Exception:
+ pass
Review comment:
```suggestion
os.chown(self._error_file.name, getpwnam(self.run_as_user).pw_uid, -1)
```
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@airflow.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [airflow] uranusjr commented on pull request #15947: Applied permissions to self._error_file
Posted by GitBox <gi...@apache.org>.
uranusjr commented on pull request #15947:
URL: https://github.com/apache/airflow/pull/15947#issuecomment-846516716
Setting the execution bit looks extremely wrong to me. At the very least this should be `0o644` instead, but even that I’m not sure is the correct fix. Why does htis only affect failed tasks? There are many unanswered questions between the issue report and the fix here.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [airflow] ashb commented on pull request #15947: Applied permissions to self._error_file
Posted by GitBox <gi...@apache.org>.
ashb commented on pull request #15947:
URL: https://github.com/apache/airflow/pull/15947#issuecomment-858535090
@kevinbsilva Could you rebase these changes to latest main branch please.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [airflow] ephraimbuddy commented on pull request #15947: Applied permissions to self._error_file
Posted by GitBox <gi...@apache.org>.
ephraimbuddy commented on pull request #15947:
URL: https://github.com/apache/airflow/pull/15947#issuecomment-885715100
> @ephraimbuddy my mistake. I've read about the static checks and after executing some of the pre-commits, it is ok (mainly black and isort). Thank you very much!
>
> I am getting errors from the MSSQL Build, but it don't seems that has any connection with the code update.
MSSQL is a known issue that is being worked on, not connected to your PR
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@airflow.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [airflow] potiuk commented on pull request #15947: Applied permissions to self._error_file
Posted by GitBox <gi...@apache.org>.
potiuk commented on pull request #15947:
URL: https://github.com/apache/airflow/pull/15947#issuecomment-848183982
> Could this also be achieved by opening the file as airflow, before switching user and then changing the owner? That way the `airflow` process already has an open file handle and can just re-wind the filehandle to read it.
Hmm. Interesting idea :) I think indeed once you have filehandle, changing ownership should have no impact. Worth trying
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [airflow] uranusjr commented on a change in pull request #15947: Applied permissions to self._error_file
Posted by GitBox <gi...@apache.org>.
uranusjr commented on a change in pull request #15947:
URL: https://github.com/apache/airflow/pull/15947#discussion_r678993422
##########
File path: airflow/task/task_runner/base_task_runner.py
##########
@@ -85,6 +86,12 @@ def __init__(self, local_task_job):
cfg_path = tmp_configuration_copy(chmod=0o600)
self._error_file = NamedTemporaryFile(delete=True)
+ if self.run_as_user:
+ try:
+ os.chown(self._error_file.name, getpwnam(self.run_as_user).pw_uid, -1)
+ except Exception:
+ pass
Review comment:
This should either bubble the exception or log that the chown failed. Personally I’d prefer *not* catching the exception for now and fix UX issues when someone complains.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@airflow.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [airflow] potiuk commented on pull request #15947: Applied permissions to self._error_file
Posted by GitBox <gi...@apache.org>.
potiuk commented on pull request #15947:
URL: https://github.com/apache/airflow/pull/15947#issuecomment-847727979
I believe this is quite wrong approach. The right solution should be setting the Umask properly for Airflow deployment.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [airflow] boring-cyborg[bot] commented on pull request #15947: Applied permissions to self._error_file
Posted by GitBox <gi...@apache.org>.
boring-cyborg[bot] commented on pull request #15947:
URL: https://github.com/apache/airflow/pull/15947#issuecomment-844229454
Congratulations on your first Pull Request and welcome to the Apache Airflow community! If you have any issues or are unsure about any anything please check our Contribution Guide (https://github.com/apache/airflow/blob/master/CONTRIBUTING.rst)
Here are some useful points:
- Pay attention to the quality of your code (flake8, pylint and type annotations). Our [pre-commits]( https://github.com/apache/airflow/blob/master/STATIC_CODE_CHECKS.rst#prerequisites-for-pre-commit-hooks) will help you with that.
- In case of a new feature add useful documentation (in docstrings or in `docs/` directory). Adding a new operator? Check this short [guide](https://github.com/apache/airflow/blob/master/docs/apache-airflow/howto/custom-operator.rst) Consider adding an example DAG that shows how users should use it.
- Consider using [Breeze environment](https://github.com/apache/airflow/blob/master/BREEZE.rst) for testing locally, it’s a heavy docker but it ships with a working Airflow and a lot of integrations.
- Be patient and persistent. It might take some time to get a review or get the final approval from Committers.
- Please follow [ASF Code of Conduct](https://www.apache.org/foundation/policies/conduct) for all communication including (but not limited to) comments on Pull Requests, Mailing list and Slack.
- Be sure to read the [Airflow Coding style]( https://github.com/apache/airflow/blob/master/CONTRIBUTING.rst#coding-style-and-best-practices).
Apache Airflow is a community-driven project and together we are making it better 🚀.
In case of doubts contact the developers at:
Mailing List: dev@airflow.apache.org
Slack: https://s.apache.org/airflow-slack
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [airflow] kacpwoja commented on pull request #15947: Applied permissions to self._error_file
Posted by GitBox <gi...@apache.org>.
kacpwoja commented on pull request #15947:
URL: https://github.com/apache/airflow/pull/15947#issuecomment-972426437
Is it just me, or this breaks run_as_user completely? How can airflow run chown without sudo? Am I missing something?
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@airflow.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [airflow] potiuk commented on pull request #15947: Applied permissions to self._error_file
Posted by GitBox <gi...@apache.org>.
potiuk commented on pull request #15947:
URL: https://github.com/apache/airflow/pull/15947#issuecomment-973988546
Ah yeah. I looked at the docs https://airflow.apache.org/docs/apache-airflow/2.2.2/security/workload.html and we even mention that those permissions to change ownership of files (and root equivalence) is needed.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@airflow.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org