You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@airflow.apache.org by "kannon92 (via GitHub)" <gi...@apache.org> on 2023/07/20 13:56:26 UTC

[GitHub] [airflow] kannon92 opened a new issue, #32718: Kubernetes Pod Operator Auth Failure if Token expires

kannon92 opened a new issue, #32718:
URL: https://github.com/apache/airflow/issues/32718

   ### Apache Airflow version
   
   2.6.3
   
   ### What happened
   
   We find that our Kubernetes Pod Operator will get issues in auth if a token expires.  
   
   We use ExecCredentials for authentication and over time, our token expires and then we get authentication errors.  
   
   ### What you think should happen instead
   
   In cases when token expires, KubernetesPodOperator should reconnect (and re-authenticate) rather than reuse the same connection.  
   
   We have a patch up where we relax the cached_property for the client and re-authenticate and that seems to fix this case.
   
   ### How to reproduce
   
   You can reproduce this with setting up https://kubernetes.io/docs/reference/config-api/client-authentication.v1beta1/#client-authentication-k8s-io-v1beta1-ExecCredential in your Kubernetes cluster and have your task run longer than the time of your token.  
   
   Once the token expires, you should get authentication errors.
   
   ### Operating System
   
   linux (not able to access this system to run this)
   
   ### Versions of Apache Airflow Providers
   
   We are using Kubernetes Pod Operator (7.1.0).
   
   ### Deployment
   
   Official Apache Airflow Helm Chart
   
   ### Deployment details
   
   _No response_
   
   ### Anything else
   
   _No response_
   
   ### Are you willing to submit PR?
   
   - [X] Yes I am willing to submit a PR!
   
   ### Code of Conduct
   
   - [X] I agree to follow this project's [Code of Conduct](https://github.com/apache/airflow/blob/main/CODE_OF_CONDUCT.md)
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: commits-unsubscribe@airflow.apache.org.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

Re: [I] Kubernetes Pod Operator Auth Failure if Token expires [airflow]

Posted by "eladkal (via GitHub)" <gi...@apache.org>.
eladkal closed issue #32718: Kubernetes Pod Operator Auth Failure if Token expires
URL: https://github.com/apache/airflow/issues/32718


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: commits-unsubscribe@airflow.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

[GitHub] [airflow] boring-cyborg[bot] commented on issue #32718: Kubernetes Pod Operator Auth Failure if Token expires

Posted by "boring-cyborg[bot] (via GitHub)" <gi...@apache.org>.
boring-cyborg[bot] commented on issue #32718:
URL: https://github.com/apache/airflow/issues/32718#issuecomment-1643975970

   Thanks for opening your first issue here! Be sure to follow the issue template! If you are willing to raise PR to address this issue please do so, no need to wait for approval.
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: commits-unsubscribe@airflow.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org