Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add support for managed identity in WASB hook #16628

Merged
merged 4 commits into from
Jun 25, 2021

Conversation

malthe
Copy link
Contributor

@malthe malthe commented Jun 24, 2021

This adds support for managed identity credential in case a password (or one of the other means of authentication) is not provided.

Read the Pull Request Guidelines for more information.
In case of fundamental code change, Airflow Improvement Proposal (AIP) is needed.
In case of a new dependency, check compliance with the ASF 3rd Party License Policy.
In case of backwards incompatible changes please leave a note in UPDATING.md.

return BlobServiceClient(
account_url=f"https://{conn.login}.blob.core.windows.net/",
credential=conn.password or ManagedIdentityCredential(),
credential=conn.password,
Copy link
Member

@potiuk potiuk Jun 24, 2021

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Well. For me this one looks like it REMOVES the MIC support. From what I see, the previous code worked in the way this PR intended to (if conn.password = None, then managedidentity credential was created and used. This PR makes the credential created but not used. Did I miss something?

Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Should it be

Suggested change
credential=conn.password,
credential=credential,

But then it is just adding an extra log entry in case the MIC is used.

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Of course – fixed. Nice catch

Copy link
Member

@potiuk potiuk left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Much better :)

@github-actions
Copy link

The PR is likely OK to be merged with just subset of tests for default Python and Database versions without running the full matrix of tests, because it does not modify the core of Airflow. If the committers decide that the full tests matrix is needed, they will add the label 'full tests needed'. Then you should rebase to the latest main or amend the last commit of the PR, and push it with --force-with-lease.

@github-actions github-actions bot added the okay to merge It's ok to merge this PR as it does not require more tests label Jun 24, 2021
@malthe malthe force-pushed the wasb-add-managed-identity-support branch from 0fd9442 to 8e00912 Compare June 24, 2021 16:14
@malthe malthe force-pushed the wasb-add-managed-identity-support branch from 8e00912 to 79781ba Compare June 24, 2021 20:35
@malthe
Copy link
Contributor Author

malthe commented Jun 25, 2021

@potiuk should be good now

@potiuk potiuk merged commit caf0a84 into apache:main Jun 25, 2021
@potiuk
Copy link
Member

potiuk commented Jun 25, 2021

Cool! Merged!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
area:providers okay to merge It's ok to merge this PR as it does not require more tests provider:microsoft-azure Azure-related issues
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants