You are viewing a plain text version of this content. The canonical link for it is here.

Posted to commits@airflow.apache.org by GitBox <gi...@apache.org> on 2018/12/09 04:11:17 UTC

[GitHub] jmcarp commented on issue #4225: [AIRFLOW-3383] Rotate fernet keys.

jmcarp commented on issue #4225: [AIRFLOW-3383] Rotate fernet keys.
URL: https://github.com/apache/incubator-airflow/pull/4225#issuecomment-445509744
 
 
   Ping @Fokko @ashb @kaxil. I agree that storing credentials in an external service like Vault would be a useful feature, but as long as we're supporting credential storage in the airflow database with fernet encryption, I think we should support fernet key rotation. This was the simplest implementation that came to mind. WDYT?
   
   I would also be happy to write up some options for using external encryption and credential services if you'd be open to it.

----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on GitHub and use the
URL above to go to the specific comment.
 
For queries about this service, please contact Infrastructure at:
users@infra.apache.org


With regards,
Apache Git Services