HomeDevCentral

Allow Airflow to connect to Vault

Description

Allow Airflow to connect to Vault

Summary:
Airflow configuration is moved to airflow.cfg, that will be easier to read
and maintain than environment variables, especially for Vault back-end.
Also, that allows a faster deployment time as secrets need only to be read once.

The Vault application role matches the airflow policy as defined in D3270.

Ref T1812.

Test Plan:

  • redeploy Airflow containers on Dwellers
  • airflow config get-value secrets backend
  • airflow connections get postgresql_fantoir

Reviewers: dereckson

Reviewed By: dereckson

Maniphest Tasks: T1812

Differential Revision: https://devcentral.nasqueron.org/D3273

Details

Provenance
derecksonAuthored on Jan 13 2024, 00:00
derecksonPushed on Jan 13 2024, 14:25
Reviewer
dereckson
Differential Revision
D3273: Allow Airflow to connect to Vault
Parents
rOPS9e46c1130e03: Create Vault policy for Airflow
Branches
Unknown
Tags
Unknown
Tasks
T1812: Deploy Airflow