Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add assume_role_kwargs in hashicorp backend config #39279

Merged
merged 1 commit into from
Apr 27, 2024

Conversation

pankajastro
Copy link
Member

@pankajastro pankajastro commented Apr 26, 2024

Address: #38536 (comment)


^ Add meaningful description above
Read the Pull Request Guidelines for more information.
In case of fundamental code changes, an Airflow Improvement Proposal (AIP) is needed.
In case of a new dependency, check compliance with the ASF 3rd Party License Policy.
In case of backwards incompatible changes please leave a note in a newsfragment file, named {pr_number}.significant.rst or {issue_number}.significant.rst, in newsfragments.

@pankajastro pankajastro marked this pull request as ready for review April 27, 2024 05:33
@pankajastro pankajastro merged commit a3f0d83 into apache:main Apr 27, 2024
40 checks passed
@pankajastro pankajastro deleted the add_assume_role_kwargs branch April 27, 2024 05:39
Comment on lines -111 to +113
role_arn: str | None = None,
assume_role_kwargs: dict | None = None,
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This require also change to
docs/apache-airflow-providers-hashicorp/secrets-backends/hashicorp-vault.rst isn't it?
in https://github.com/apache/airflow/pull/38536/files it added
Add parameter "role_arn": "The AWS ARN of the role to assume"

Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Aha, sorry! let me fix this! thanks!

RodrigoGanancia pushed a commit to RodrigoGanancia/airflow that referenced this pull request May 10, 2024
Add assume_role_kwargs in hashicorp backend config
```
AIRFLOW__SECRETS__BACKEND_KWARGS='{"kv_engine_version": 1, "mount_point": "kv", "variables_path": "airflow", "url": "http://127.0.0.0:8200/", "auth_type": "aws_iam", "assume_role_kwargs": {"RoleArn": "arn:aws:iam::1234567890000:role/hashicorp-aws-iam", "RoleSessionName": "airflow", "DurationSeconds": 900}}'
```
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants