diff --git a/airflow/config/webserver_config.py b/airflow/config/webserver_config.py new file mode 100644 index 00000000..b1d79f09 --- /dev/null +++ b/airflow/config/webserver_config.py @@ -0,0 +1,3 @@ +# PR 244: DISABLE AIRRLOW AUTHENTICATION (https://github.com/unity-sds/unity-sps/pull/244) +# Disable airflow authentication, https://airflow.apache.org/docs/apache-airflow-providers-fab/stable/auth-manager/webserver-authentication.html +AUTH_ROLE_PUBLIC = "Admin" diff --git a/airflow/helm/values.tmpl.yaml b/airflow/helm/values.tmpl.yaml index d87fa1f9..0e268987 100644 --- a/airflow/helm/values.tmpl.yaml +++ b/airflow/helm/values.tmpl.yaml @@ -130,6 +130,10 @@ webserverSecretKeySecretName: ${webserver_secret_name} webserver: replicas: 3 + # PR 244: DISABLE AIRRLOW AUTHENTICATION (https://github.com/unity-sds/unity-sps/pull/244) + webserverConfig: |- + ${webserver_config} + startupProbe: timeoutSeconds: 20 failureThreshold: 60 # Number of tries before giving up (10 minutes with periodSeconds of 10) diff --git a/terraform-unity/modules/terraform-unity-sps-airflow/main.tf b/terraform-unity/modules/terraform-unity-sps-airflow/main.tf index 80658129..fde7aeb4 100644 --- a/terraform-unity/modules/terraform-unity-sps-airflow/main.tf +++ b/terraform-unity/modules/terraform-unity-sps-airflow/main.tf @@ -412,6 +412,7 @@ resource "helm_release" "airflow" { unity_cluster_name = data.aws_eks_cluster.cluster.name karpenter_node_pools = join(",", var.karpenter_node_pools) cwl_dag_ecr_uri = "${data.aws_caller_identity.current.account_id}.dkr.ecr.us-west-2.amazonaws.com" + webserver_config = indent(4, file("${path.module}/../../../airflow/config/webserver_config.py")) }) ] set_sensitive {