You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@airflow.apache.org by "slavachy (via GitHub)" <gi...@apache.org> on 2025/12/19 12:50:37 UTC
[PR] ADO-348 Implemented Secure for Worker log server [airflow]
slavachy opened a new pull request, #59636:
URL: https://github.com/apache/airflow/pull/59636
## Description
Add SSL/HTTPS support for worker and triggerer log servers to enable secure log transmission in production deployments.
## Changes
### Configuration
- Add `worker_log_server_ssl_cert` - path to SSL certificate
- Add `worker_log_server_ssl_key` - path to SSL private key
- Add `worker_log_server_ssl_verify` - SSL verification control (True/False/path to CA bundle)
### Implementation
- Update `serve_logs.py` to configure Gunicorn with SSL certificates
- Update `file_task_handler.py` to use HTTPS URLs when SSL is configured
- Automatic protocol detection (HTTP/HTTPS) based on SSL config
### Testing
- Add comprehensive SSL configuration tests
- Add tests for SSL certificate verification
- Add tests for error handling (missing cert/key files)
### Documentation
- Add "Securing log server with SSL" section to logging-tasks.rst
- Add SSL configuration examples
- Add deployment considerations and security warnings
- Add SSL section to security/webserver.rst
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@airflow.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [PR] ADO-348 Implemented Secure for Worker log server [airflow]
Posted by "boring-cyborg[bot] (via GitHub)" <gi...@apache.org>.
boring-cyborg[bot] commented on PR #59636:
URL: https://github.com/apache/airflow/pull/59636#issuecomment-3674967788
Congratulations on your first Pull Request and welcome to the Apache Airflow community! If you have any issues or are unsure about any anything please check our Contributors' Guide (https://github.com/apache/airflow/blob/main/contributing-docs/README.rst)
Here are some useful points:
- Pay attention to the quality of your code (ruff, mypy and type annotations). Our [prek-hooks]( https://github.com/apache/airflow/blob/main/contributing-docs/08_static_code_checks.rst#prerequisites-for-prek-hooks) will help you with that.
- In case of a new feature add useful documentation (in docstrings or in `docs/` directory). Adding a new operator? Check this short [guide](https://github.com/apache/airflow/blob/main/airflow-core/docs/howto/custom-operator.rst) Consider adding an example DAG that shows how users should use it.
- Consider using [Breeze environment](https://github.com/apache/airflow/blob/main/dev/breeze/doc/README.rst) for testing locally, it's a heavy docker but it ships with a working Airflow and a lot of integrations.
- Be patient and persistent. It might take some time to get a review or get the final approval from Committers.
- Please follow [ASF Code of Conduct](https://www.apache.org/foundation/policies/conduct) for all communication including (but not limited to) comments on Pull Requests, Mailing list and Slack.
- Be sure to read the [Airflow Coding style]( https://github.com/apache/airflow/blob/main/contributing-docs/05_pull_requests.rst#coding-style-and-best-practices).
- Always keep your Pull Requests rebased, otherwise your build might fail due to changes not related to your commits.
Apache Airflow is a community-driven project and together we are making it better 🚀.
In case of doubts contact the developers at:
Mailing List: dev@airflow.apache.org
Slack: https://s.apache.org/airflow-slack
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@airflow.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [PR] ADO-348 Implemented Secure for Worker log server [airflow]
Posted by "slavachy (via GitHub)" <gi...@apache.org>.
slavachy commented on PR #59636:
URL: https://github.com/apache/airflow/pull/59636#issuecomment-3675016006
This PR was created in the wrong repository by mistake.
Closing this PR. Thank you for the automated welcome message!
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@airflow.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [PR] ADO-348 Implemented Secure for Worker log server [airflow]
Posted by "slavachy (via GitHub)" <gi...@apache.org>.
slavachy closed pull request #59636: ADO-348 Implemented Secure for Worker log server
URL: https://github.com/apache/airflow/pull/59636
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@airflow.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org