Arunodoy18 commented on issue #60991: URL: https://github.com/apache/airflow/issues/60991#issuecomment-3794181101
Thanks for opening this issue — the use case makes sense 👍 I’ve gone through the description and PR #60990 for context. I agree that the current Kerberos support is tightly scoped to the webserver and doesn’t translate well to task-level authentication, especially for HTTP-based integrations. I’m interested in helping move this forward. As a first step, I’d like to focus on a minimal, scoped approach that enables task-local Kerberos ticket initialization (via kinit) using connection-managed keytabs and principals, without changing existing webserver behavior. Before proceeding, I wanted to confirm: Whether the initial scope should be limited to HttpOperator only, or designed in a way that could later be reused by other hooks/operators. Any preferred guidance around Kerberos ticket cache handling for concurrent tasks on the same worker. Happy to iterate on the design based on maintainer feedback before opening a PR. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
