GitHub user potiuk added a comment to the discussion: Allow Airflow to run in FIPs enabled environment
Sure. We need to implement Auth Manager providing the same capabilities - KeyCloak likely is the choice. We might not be able to have a fully Fledged implementation to replace what FAB providers there (i.e. integration with Oauth and others), which means that Airflow 3 without Flask might not be able to provide sophisticated mechanisms of authentication - LDAP/OAUTH and the like. So yes. Developing a KeyCloak (or similar) Auth manager that will fully replace FAB is a help that is most welcome - more details in https://cwiki.apache.org/confluence/pages/viewpage.action?pageId=311627974#AIP79:RemoveFlaskAppBuilderasCoredependency-Why? (see the Why? section) and @vincbeck @o-nikolas have been running an evaluation earlier to see if it is feasible. It is, and possible, but we need someone who is enterprise-level focused and already needs those enterprise-level authentication to implement the AuthManager. I am sure if you volunteer for that @o-nikolas and @vincbeck might provide some leads. GitHub link: https://github.com/apache/airflow/discussions/25625#discussioncomment-11442946 ---- This is an automatically sent email for [email protected]. To unsubscribe, please send an email to: [email protected]
