amoghrajesh commented on issue #50025:
URL: https://github.com/apache/airflow/issues/50025#issuecomment-2857387969

   > [@amoghrajesh](https://github.com/amoghrajesh) I don't know if this is the 
"right" point but if the solution space is still open... besides using ENV I 
could also recommend to consider "downward API" which is also a cook K8s 
feature: You can put arbitrary content into a label and then mount such label 
as a file into the container. We use this to pass config files int he POD 
manifest into containers: 
https://kubernetes.io/docs/concepts/workloads/pods/downward-api/
   > 
   > Limitations for both ENV as well as labels apply, so most probably you can 
not pass more than 4K into it... I believe but am not sure.
   
   We can do this too @jscheffl thanks for proposing it.
   
   I do not see how there will be a big benefit from doing it, I mean in the 
end its env vs file. The token that is exposed is short lived. Even now, it is 
a plain text file with no encryption. So the risk of having it in plain text 
file is almost as bad as having it in env!


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to