Stable/1.28.x - Allianz - Celery DB authentication with Azure Service Principal #1186
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
spa env vars updated for celery and worker
azure identity packaged added to worker requirement
Service Principal Logic added
custom backend for celery
workflow file uploaded
Saseem75
changed the title
removed password/token masking
removed unwanted - methods get_connection + get_db_engine
utils.py introduced instead of celery_db_backend.py
readme.md updated
sambles
merged commit 2ea66bb
into
OasisLMF:adjust-pr-oasis-1.28.x
14 of 20 checks passed
sambles
added a commit
that referenced
this pull request
Apr 7, 2025
… Principal (#1190) * Stable/1.28.x - Allianz - Celery DB authentication with Azure Service Principal (#1186) * Update postgres.docker-compose.yml spa env vars updated for celery and worker * Update requirements-worker.in azure identity packaged added to worker requirement * Update requirements-worker.txt * Update celeryconf.py Service Principal Logic added * Create celery_db_backend.py custom backend for celery * Create test.md * Add files via upload workflow file uploaded * Update test.md * Create celery_readme.md * Update celery_readme.md * Update celery_readme.md * Update celeryconf.py removed password/token masking * Update celeryconf.py * Update celeryconf.py * Update celery_readme.md * Update celery_db_backend.py * Update celery_readme.md * Update celery_db_backend.py removed unwanted - methods get_connection + get_db_engine * Update celery_readme.md * Update and rename celery_db_backend.py to utils.py utils.py introduced instead of celery_db_backend.py * Update and rename celery_readme.md to readme.md * Update readme.md readme.md updated * Adjust PR * update --------- Co-authored-by: Saseem75 <[email protected]>
sambles
added a commit
that referenced
this pull request
Apr 24, 2025
* Stable/1.28.x - Allianz - Celery DB authentication with Azure Service Principal (#1190) * Stable/1.28.x - Allianz - Celery DB authentication with Azure Service Principal (#1186) * Update postgres.docker-compose.yml spa env vars updated for celery and worker * Update requirements-worker.in azure identity packaged added to worker requirement * Update requirements-worker.txt * Update celeryconf.py Service Principal Logic added * Create celery_db_backend.py custom backend for celery * Create test.md * Add files via upload workflow file uploaded * Update test.md * Create celery_readme.md * Update celery_readme.md * Update celery_readme.md * Update celeryconf.py removed password/token masking * Update celeryconf.py * Update celeryconf.py * Update celery_readme.md * Update celery_db_backend.py * Update celery_readme.md * Update celery_db_backend.py removed unwanted - methods get_connection + get_db_engine * Update celery_readme.md * Update and rename celery_db_backend.py to utils.py utils.py introduced instead of celery_db_backend.py * Update and rename celery_readme.md to readme.md * Update readme.md readme.md updated * Adjust PR * update --------- Co-authored-by: Saseem75 <[email protected]> * Set version 1.28.13 Set version 1.28.13 * Update changelog --------- Co-authored-by: Saseem75 <[email protected]> Co-authored-by: awsbuild <[email protected]>
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
CELERY DB authentication with Azure Service Principal
Added class to fetch Azure PostgreSQL Service Principal token instead of a fixed password.
For this to work the config option
AZURE_SERVICE_PRINCIPAL_USERmust be set, along with the following.AZURE_TENANT_IDAZURE_CLIENT_IDAZURE_CLIENT_SECRETAZURE_SERVICE_PRINCIPAL_USERsp_user@db)CELERY_RESULTS_DB_BACKENDdb+postgresql)DB_HOSTDB_PORTDB_NAME