mik-laj commented on pull request #10873:
URL: https://github.com/apache/airflow/pull/10873#issuecomment-695833186


   @potiuk I'm eager to talk about the mailing list, but in my opinion 
displaying the item list is a significant extension of the backend secret 
concept.  During its development, the topic of the web UI was discussed and it 
was decided that the backend secret is just a single interface with the 
`get(key)` method.  We have also decided that we do not need to display these 
elements in the Web UI, as users can learn about these keys from their 
administrator.
   
   > WDYT @mik-laj - is it good that we do not see secret backend connection, 
and when we have the connection in db, we see a wrong one ? I think it's rather 
bad and might be super-confusing for the user.
   
   This is confusing, and I agree that it is worth warning users about the 
consequences of configuring the backend secret. I think the warning "Your 
administrator has set up a secret backend. The data displayed in the Web UI may 
not represent the state available for the workers".  I am afraid that reading 
any of the values by the webserver can be problematic in corporate environments 
as corporate environments have a very strict secret access policy. The most 
common environments I take care of are deployed consisting of several GCP 
projects. The webserver is in a project that cannot activate the API or access 
it at all.  
   
   Recently, I even had to deal with a issues related to it. In one case, the 
webserver still tried to make connections to the backend secret, but it never 
succeeded.
   https://github.com/apache/airflow/pull/10365
   
   
   
   


----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

For queries about this service, please contact Infrastructure at:
[email protected]


Reply via email to