Getting an IAM token

Using a directed acyclic graph (DAG), you can get the IAM token of the service account attached to an Apache Airflow™ cluster.

Prepare the DAG file and run the graphPrepare the DAG file and run the graph

1. Create a local file named get_iam_token.py and copy the following script to it:

   from airflow.decorators import dag, task
   import yandexcloud
   
   
   @dag(schedule=None)
   def get_iam_token():
       @task
       def print_iam_token():
           sdk = yandexcloud.SDK()
           token = sdk._channels._token_requester.get_token()
           print("token: ", token[:20])
   
       print_iam_token()
   
   
   get_iam_token()
   

2. Upload the get_iam_token.py DAG file to the bucket you created earlier. This will automatically create a graph with the same name in the Apache Airflow™ web interface.

3. Open the Apache Airflow™ web interface.

4. Make sure a new graph named get_iam_token has appeared in the DAGs section.

   It may take a few minutes to upload a DAG file from the bucket.

5. To run the graph, click in the line with its name.

Check the resultCheck the result

To check the result in the Apache Airflow™ web interface:

1. In the DAGs section, open the get_iam_token graph.
2. Go to the Graph section.
3. Select the print_iam_token job.
4. Go to Logs.
5. Make sure the logs contain the "token: ", iam_token string. This means the query was successful.