adrian-edbert commented on issue #54175:
URL: https://github.com/apache/airflow/issues/54175#issuecomment-3209399565

   @suhail-zemoso 
   yes, I agree that run_as_user should not be able to access worker owned 
files, on the current airflow version though airflow worker does try to, which 
under the configuration make it throw an error when using airflow run_as_user 
and git dag bundle together
   
   I think this is because git dag bundle trying to run clone again on 
run_as_user context, which need to acquire lock with the same path as airflow 
worker user  
   technically the dag code should be there already, since airflow worker 
already cloned it  
   so I think either:
   - run_as_user should skip the clone and lock acquirement step, or
   - run_as_user should clone into different directory,
   should allow airflow run_as_user to be used together with git dag bundle
   
   not sure what is the ideal impersonation should be in your comment, and 
whether it's possible to be implemented in this case?


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to