You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@airflow.apache.org by "andrii-korotkov-verkada (via GitHub)" <gi...@apache.org> on 2024/12/18 19:45:17 UTC
[D] Is it possible to generate secrets but with empty data? [airflow]
GitHub user andrii-korotkov-verkada created a discussion: Is it possible to generate secrets but with empty data?
Hey. After chatting with security team member, having a secret value committed to the repository is unacceptable. I can configure helm values to reference an external secret, but then it won't be generated IIUC https://github.com/apache/airflow/blob/main/chart/templates/secrets/pgbouncer-stats-secret.yaml. A middle ground can be generating a secret, but specifying empty data section, so that the data section is not managed by ArgoCD when deploying and can be edited manually. Is that possible? Should I create an issue and raise a PR for that?
GitHub link: https://github.com/apache/airflow/discussions/45055
----
This is an automatically sent email for commits@airflow.apache.org.
To unsubscribe, please send an email to: commits-unsubscribe@airflow.apache.org
Re: [D] Is it possible to generate secrets but with empty data? [airflow]
Posted by "andrii-korotkov-verkada (via GitHub)" <gi...@apache.org>.
GitHub user andrii-korotkov-verkada closed the discussion with a comment: Is it possible to generate secrets but with empty data?
Filed https://github.com/apache/airflow/issues/45140 to support this.
GitHub link: https://github.com/apache/airflow/discussions/45055#discussioncomment-11640719
----
This is an automatically sent email for commits@airflow.apache.org.
To unsubscribe, please send an email to: commits-unsubscribe@airflow.apache.org
Re: [D] Is it possible to generate secrets but with empty data? [airflow]
Posted by "andrii-korotkov-verkada (via GitHub)" <gi...@apache.org>.
GitHub user andrii-korotkov-verkada closed a discussion: Is it possible to generate secrets but with empty data?
Hey. After chatting with security team member, having a secret value committed to the repository is unacceptable. I can configure helm values to reference an external secret, but then it won't be generated IIUC https://github.com/apache/airflow/blob/main/chart/templates/secrets/pgbouncer-stats-secret.yaml. A middle ground can be generating a secret, but specifying empty data section, so that the data section is not managed by ArgoCD when deploying and can be edited manually. Is that possible? Should I create an issue and raise a PR for that?
GitHub link: https://github.com/apache/airflow/discussions/45055
----
This is an automatically sent email for commits@airflow.apache.org.
To unsubscribe, please send an email to: commits-unsubscribe@airflow.apache.org