How do I disable Airflow login for authentication and authorization?

Question

I have a fork of apache airflow which I want to run behind a proxy server. All the authentication will be already handled outside airflow, thus I don't want the customers to login with another set of credentials again. Is there any way to completely remove/disable the authentication from airflow.

Basically, I want to get rid of this initial login screen and allow anyone who reaches airflow to have user (not admin) access. [Worst case admin access is also ok.]

Did you find a solution to this? – deppfx Oct 06 '19 at 07:53 — deppfx, Oct 06 '19 at 07:53

score 9 · Answer 1 · answered Mar 09 '21 at 17:32

9

If anyone is using docker, this worked for me(airflow 2.0.1):

Add a copy of webserver_config.py somewhere in your project.
Uncomment AUTH_ROLE_PUBLIC and set 'Admin' as the value.

AUTH_ROLE_PUBLIC = 'Admin'

Add these settings to your .cfg file.

[webserver]
rbac = False
authenticate = False

In your Dockerfile, add the command to copy the webserver_config.py into the /home/airflow directory. e.g:

ADD airflow/webserver_config.py /home/airflow

Once you spin up the pod, config file should be appended to the directory disabling the authentication.

answered Mar 09 '21 at 17:32

Rolando Ardon

109
1
3

Thanks for this, I'm starting to think Airflow 2.0.1 (or the docker container) has rbac enabled always. Without the webserver_config file you can't control it at all. – Hitobat Apr 27 '21 at 16:56
3

I managed to find some official docs about it [here](https://airflow.apache.org/docs/apache-airflow/stable/upgrading-to-2.html#step-5-upgrade-airflow-dags). It's the very last point, just before step 6. rbac is the only auth now, so settings from step 3 are completely removed/disabled. – Hitobat Apr 27 '21 at 17:48
were you able to see the flask UI? – shruti bidada Sep 27 '21 at 22:31
The `rbac` and `authenticate` option no longer exist or no longer documented in [Airflow 2.5.3 config reference](https://airflow.apache.org/docs/apache-airflow/2.5.3/configurations-ref.html#webserver) for – Keto Apr 20 '23 at 17:25

Anup · Answer 2 · 2019-08-27T19:57:18.793

4

Change the authenticate value to false in airflow config file (airflow.cfg) and restart the airflow,

# Set to true to turn on authentication:
# https://airflow.apache.org/security.html#web-authentication
authenticate = False

RBAC,

rbac = False

edited Aug 27 '19 at 19:57

answered Aug 27 '19 at 18:45

Anup

250
1
6

@kaxil thanks for correcting, the above is for Web auth not for RBAC. Should we change the rbac = False within the config file to disable the rbac auth? – Anup Aug 27 '19 at 19:29
were you able to see the new UI after setting rbac to false? – shruti bidada Sep 27 '21 at 22:13
This doesn't work for airflow 2.x or later. Only works for airflow 1.x – Geobio Boo Nov 29 '21 at 21:35

Geobio Boo · Answer 3 · 2022-02-21T02:01:58.147

For airflow 2.0.1 and later:

In file: $AIRFLOW_HOME/webserver_config.py

add/edit this line (note that by default it says = 'Public' and you need to change it!)

AUTH_ROLE_PUBLIC = 'Admin'

Documentation about this argument: https://airflow.apache.org/docs/apache-airflow/stable/security/webserver.html#web-authentication

The feature was added in this PR/change: https://github.com/apache/airflow/pull/13191 which was merged into airflow 2.0.1

score 0 · Answer 4 · answered Mar 15 '21 at 00:04

I created a new user "Admin" with "Admin" role using the following command, and it works for me:

$ airflow users create \
      --username Admin \
      --firstname FIRST_NAME \
      --lastname LAST_NAME \
      --role Admin \
      --email admin@example.org

score 0 · Answer 5 · answered Apr 14 '21 at 11:28

0

One way is to disable the RBAC via an environment variable. Make sure you set the following before starting the webserver:

export AIRFLOW__WEBSERVER__RBAC=False

See here for more details. The other answers here will all work as well!

answered Apr 14 '21 at 11:28

Zack Klein

1

How do I disable Airflow login for authentication and authorization?

5 Answers5