potiuk commented on issue #10753:
URL: https://github.com/apache/airflow/issues/10753#issuecomment-687634263
I really cannot agree with that :).
The code just sits there. ready to be used whenever we need to use another
version of it. No harm. It's just there for our users of they need to build it
on their ow. Once we add the code to extract and include the sources of
pgbouncer to the release.script the whole work is done.
I'd we do need to upgrade, then we would have to do it anyway - and by
having the scripts it's just the matter of changing version and running one
script. That's it.
For all the practical use by both users and 99% of contribution time it is
exactly the same effort whether external or Apache image used. No more
maintenance, no more effort from the users not contributors. they don't even
need to know where it comes from.
I just want to present you the real use case a. Ask you for advice
@dimberman and @ashb .
It happens to us as we speak. We work with a future big user of Airflow -
hopefully. One of the big (really big) SaAS providers. Their security team
tells their development team 'our security team wants to build the images on
our own - give us the sources, we build them for you. For development, use
whatever you want but when you deploy staging/production you have to use images
but by us.
This (above) is true story. Our customer wants to deploy Airflow using helm
charts (it's a PoC so they are ok with unreleased version - this is really a
development concept) and the requirement is that when they finally deploy it
that all the images are built and hosted by their own security team. It has to
be legal and they won't accept any binaries coming from outside the sources
they control (PyPI'/apt).
Question then.
LWhat would you say to those kind of customers if they are thinking about
using Airflow and released chart @dimberman and @ashb if we did not have those
sources officially released by Airflow ? Should they be forced.to make an
Agreement with all the 3rd-party providers on delivering them the sources ?
What would you answer to those users of Airflow?
What would be the legal status of using the Chart then ?
I really would like to know answer to that question.
J
----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
[email protected]
