NBardelot commented on a change in pull request #12467:
URL: https://github.com/apache/airflow/pull/12467#discussion_r535032753



##########
File path: airflow/config_templates/config.yml
##########
@@ -2053,3 +2053,13 @@
       type: string
       example: ~
       default: "NamedHivePartitionSensor"
+- name: ssh
+  description: ~
+  options:
+    - name: private_keys_algorithm_support
+      description: |
+        Comma separated list of ssh algorithms names (following `ssh-keygen` 
naming) supported by
+        SSH hook
+      type: string
+      example: ~
+      default: "dsa,ecdsa,ed25519,rsa"

Review comment:
       Where I work, Airflow is given to teams of users as a platform:
   
     * my team builds the infrastructure and provides Airflow with a standard 
configuration
     * the teams use their instance of Airflow
   
   Our standard configuration includes the decisions about security. We need to 
be able to enforce the security team choice of algorithms used.




----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

For queries about this service, please contact Infrastructure at:
[email protected]


Reply via email to