[Ingestion Workflow] OSDU services and Airflow two-way secure communications
Provide clear authentication and authorization model and specification on OSDU services and Airflow two-way secure communications.
- How does Workflow service call into Airflow?
- Note: use Airflow basic auth loses the identity of the original caller, and increase the potential security risk if the Workflow service is compromised
- How does Airflow call into Storage service?
- Note: should caller identity been passed to Storage service to carry out record insertion? If not, what identity should be used to call Storage service from Airflow? @dkodeih @stephenwhitley