You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Now log out of the UI. This next section will illustrate user authorization with the Open Policy Agent (OPA) and the OPA Authorizer that is included in Stackable's Airflow product images.
183
+
Now log out of the UI.
184
+
This next section will illustrate user authorization with the Open Policy Agent (OPA) and the OPA Authorizer that is included in Stackable's Airflow product images.
184
185
Two other users - other than `admin` - are supplied with this demo: `jane.doe` and `richard.roe` (the passwords are the same as the user names).
185
186
`jane.doe` has permission to view all DAGs but only has permission to activate and run `core_deferrable_sleep_demo`.
186
187
`richard.roe` does not have permission to view or action any DAGs.
187
188
Login in as `jane.doe`.
188
-
You will see the list of 4 DAGs as usual, and can enable `core_deferrable_sleep_demo` (the only DAG not automatically enabled when the demo was deployed).
189
+
Select the DAGs view, making sure to set the filter from `Enabled` to `All`.
190
+
You will see the list of 4 DAGs, and can enable `core_deferrable_sleep_demo` (the only DAG not automatically enabled when the demo was deployed).
189
191
But if you try and run any other DAG, permission will be denied:
== Patching Airflow to stress-test DAG parsing using relevant environment variables
214
216
217
+
Log back into the UI as `admin`.
215
218
The demo also created a third DAG in the ConfigMap, called `dag_factory.py`, which was not mounted to the cluster and therefore does not appear in the UI.
216
219
This DAG can be used to create a number of individual DAGs on-the-fly, thus allowing a certain degree of stress-testing of the DAG scan/register steps (the generated DAGs themselves are trivial and so this approach will not really increase the burden of DAG _parsing_).
217
220
To include this in the list of DAGs (without removing the existing ones), an extra volumeMount is needed, as shown below.
0 commit comments