search

apache / airflow

Apache Airflow - A platform to programmatically author, schedule, and monitor workflows
https://airflow.apache.org/
Apache License 2.0
36.49k stars 14.13k forks source link

Using keycloak with Airflow #14002

Open rg2609 opened 3 years ago

rg2609 commented 3 years ago

Description

Can we have the Singel Sign On(SSO) in airflow? Using the Keycloak with Airflow. I am new to the flask project, so I don't have any idea about the Airflow project.

Use case / motivation I found the StackOverflow post for OpenID is setting up the Keycloak configuration in the flask project link

I also found some more posts about the same. https://github.com/skhatri/airflow-by-example https://stackoverflow.com/questions/64481704/airflow-authentication-with-rbac-and-key-cloak https://www.manishpoddar.com/post/how-to-implement-aws-single-sign-on-sso-on-airflow

Any suggestion and guidance will be appreciated. Thank you

boring-cyborg[bot] commented 3 years ago

Thanks for opening your first issue here! Be sure to follow the issue template!

mik-laj commented 3 years ago

I have successfully set up Airflow with Keycloak, but I haven't found the time yet to contribute it to the community, but I have described how you can do it yourself. See: https://github.com/apache/airflow/issues/11305

rg2609 commented 3 years ago

@mik-laj gone through your post. I tried putting webserver_config.py in, but no success for me.

timothyclarke commented 3 years ago

@rg2609 I've raised a feature request to Flask-AppBuilder as it should pickup openid scopes and decode them correctly. I've also posted a response on the stack overflow link along with code snippet.

I imagine that this issue will be closed (hopefully with a documentation update surrounding the openid scope) as the problem is in AppBuilder.

jscheffl commented 2 months ago

I would assume chances are high that this is (after a long long time) maybe getting a good new standard with AIP-79