如何在气流 2.0.1 上禁用默认身份验证答案

【问题标题】：How to disable default authentication on airflow 2.0.1如何在气流 2.0.1 上禁用默认身份验证
【发布时间】：2021-03-24 22:41:08
【问题描述】：

我们正在将我们的气流服务升级到部署在 AWS 上的 2.0.1，但是，升级后，它具有默认的身份验证页面。 airflow2

按照其他在线帖子的建议，我们已经在配置文件中为我们的 ansible 部署设置了 authenticate 和 rbac 为 false，但这并没有解决问题。

[webserver]
...
# Set to true to turn on authentication:
# https://airflow.incubator.apache.org/security.html#web-authentication
authenticate = False

# Filter the list of dags by owner name (requires authentication to be enabled)
filter_by_owner = False

# Filtering mode. Choices include user (default) and ldapgroup.
# Ldap group filtering requires using the ldap backend
#
# Note that the ldap server needs the "memberOf" overlay to be set up
# in order to user the ldapgroup mode.
owner_mode = user

# Default DAG view.  Valid values are:
# tree, graph, duration, gantt, landing_times
dag_default_view = tree

# Default DAG orientation. Valid values are:
# LR (Left->Right), TB (Top->Bottom), RL (Right->Left), BT (Bottom->Top)
dag_orientation = LR

# Puts the webserver in demonstration mode; blurs the names of Operators for
# privacy.
demo_mode = False

# The amount of time (in secs) webserver will wait for initial handshake
# while fetching logs from other worker machine
log_fetch_timeout_sec = 5

# By default, the webserver shows paused DAGs. Flip this to hide paused
# DAGs by default
hide_paused_dags_by_default = False

# Consistent page size across all listing views in the UI
page_size = 100

# Use FAB-based webserver with RBAC feature
rbac = False

【问题讨论】：

标签： amazon-web-services ansible terraform airflow-2.x

【解决方案1】：

来自docs

要停用身份验证并允许将用户标识为匿名用户，需要将 $AIRFLOW_HOME/webserver_config.py 中的以下条目设置为匿名用户默认拥有的所需角色：

AUTH_ROLE_PUBLIC = 'Admin'

【讨论】：