ashb commented on PR #29623: URL: https://github.com/apache/airflow/pull/29623#issuecomment-1448728749
This is designed to be used by feature such as https://kubernetes.io/docs/tasks/configure-pod-container/configure-service-account/#service-account-issuer-discovery where the kubelet is responsible for managing the contents of this web identity file. This whole PR lets that be usable and means that users don't have to bake credentials in to the image/pod or even in connections -- i.e. they make use of short-lived credentials --> are more secure than static key pairs. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
