airflow icon indicating copy to clipboard operation
airflow copied to clipboard

Deprecated kerberos auth removed

Open dirrao opened this issue 1 year ago • 4 comments

The following deprecated kerberos auth removed

  1. airflow.auth.managers.fab.api.auth.backend.kerberos_auth
  2. airflow.api.auth.backend.kerberos_auth

dirrao avatar Aug 23 '24 10:08 dirrao

Breaking change must have news fragment to notify users what was removed and how to mitigate. In this case just alerting about module remove and how to set it up with fab provider

I have already added the news fragment. Am I missing anything?

dirrao avatar Aug 24 '24 04:08 dirrao

@eladkal ?

potiuk avatar Aug 27 '24 14:08 potiuk

Sorry, need to be another bad guy here. We said for Airflow 3 dev rules we must separate PRs for providers and stuff for the core. Assume we need to split this here as well. (1) for provider update and (2) for removing/breaking change in core.

(whereas I assume we don't plan to back-port to 2.10 so technically could be one PR?)

jscheffl avatar Aug 27 '24 21:08 jscheffl

@eladkal Let me know if you want me to separate core and providers.

dirrao avatar Aug 28 '24 03:08 dirrao

@eladkal / @jscheffl Do you want me to create separate PR for provider changes?

dirrao avatar Sep 02 '24 03:09 dirrao

Yep I think it is needed. But we might actually want only core changes, breaking change in providers will result in creating major versions which we might not want yet. I'll let @eladkal confirm

vincbeck avatar Sep 04 '24 14:09 vincbeck

@dirrao Could you please update this PR (or create another one) to include only changes from core?

vincbeck avatar Sep 06 '24 17:09 vincbeck

@vincbeck / @jscheffl Provider changes are dependent on the core. Not sure how to support the backward compatibility. Please take a look at the provider dependency. Do you want me to add if else conditional based logic?

dirrao avatar Sep 07 '24 07:09 dirrao

Actually I think your changes are fine. It seems inevitable to force Airflow 3 to use the latest FAB version provider. See comment here. If that is the case your changes are not breaking for providers. You back ported airflow/api/auth/backend/kerberos_auth.py to airflow/providers/fab/auth_manager/api/auth/backend/kerberos_auth.py (am I right?) so FAB provider no longer depend on core Airflow for Kerberos auth (which is good). The only issue would be to use Airflow 3 with current version of FAB provider or earlier but, as mentioned, if this is something that will not be possible, I think these changes are fine. In this sense, these changes are not breaking for FAB provider.

vincbeck avatar Sep 09 '24 21:09 vincbeck

Actually I think your changes are fine. It seems inevitable to force Airflow 3 to use the latest FAB version provider. See comment here. If that is the case your changes are not breaking for providers. You back ported airflow/api/auth/backend/kerberos_auth.py to airflow/providers/fab/auth_manager/api/auth/backend/kerberos_auth.py (am I right?) so FAB provider no longer depend on core Airflow for Kerberos auth (which is good). The only issue would be to use Airflow 3 with current version of FAB provider or earlier but, as mentioned, if this is something that will not be possible, I think these changes are fine. In this sense, these changes are not breaking for FAB provider.

Yes, my changes are backward compatible. They will simply start using the FAB provider module instead of the deprecated core auth module.

dirrao avatar Sep 10 '24 05:09 dirrao

@potiuk / @eladkal I'm awaiting final approval to proceed with the merge. Could you please take a look when you get a chance?

dirrao avatar Sep 10 '24 05:09 dirrao

The commit message says removed deprecation but this PR also adds more functionality to the provider. Is the commit message right?

The only code added to the provider is code moved from core to provider. There is no new functionality. I think the message is fair

vincbeck avatar Sep 16 '24 20:09 vincbeck

The commit message says removed deprecation but this PR also adds more functionality to the provider. Is the commit message right?

The only code added to the provider is code moved from core to provider. There is no new functionality. I think the message is fair

Yes. No new functionality added.

dirrao avatar Sep 17 '24 02:09 dirrao

The only code added to the provider is code moved from core to provider. There is no new functionality. I think the message is fair

ok then I will modify the provider change log

eladkal avatar Sep 17 '24 03:09 eladkal