ad-m edited a comment on issue #9873: URL: https://github.com/apache/airflow/issues/9873#issuecomment-660390760
I don't have full knowledge of Airflow environment in Kubernetes, but can we use Google Kubernetes Service Account Token instead of Google ID Token? Then there is no limitation to the use of the Google environment. From the AWS SDK perspective, integration is limited to setting two environment variables: - AWS_WEB_IDENTITY_TOKEN_FILE - path to file with Id Token - AWS_ROLE_ARN - target identification. In AWS_WEB_IDENTITY_TOKEN_FILE, you can supply the Service Account Kubernetes token from the user's Kubernetes cluster exactly as the AWS webhook does. ---------------------------------------------------------------- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. For queries about this service, please contact Infrastructure at: [email protected]
