This is an automated email from the ASF dual-hosted git repository. potiuk pushed a commit to branch v1-10-test in repository https://gitbox.apache.org/repos/asf/airflow.git
commit f86d5345723476bb49c4980ae4587eb16e50788a Author: Jarek Potiuk <[email protected]> AuthorDate: Mon Oct 12 13:09:47 2020 +0200 Adds missing schema for kerberos sidecar configuration (#11413) * Adds missing schema for kerberos sidecar configuration The kerberos support added in #11130 did not have schema added to the values.yml. This PR fixes it. Co-authored-by: Jacob Ferriero <[email protected]> * Update chart/values.schema.json Co-authored-by: Jacob Ferriero <[email protected]> (cherry picked from commit 9142eed715e87a6b04884dc8950c3af79aec0425) --- chart/values.schema.json | 48 ++++++++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 48 insertions(+) diff --git a/chart/values.schema.json b/chart/values.schema.json index 6c2c41a..2fc01a9 100644 --- a/chart/values.schema.json +++ b/chart/values.schema.json @@ -823,6 +823,16 @@ } } }, + "kerberosSidecar": { + "description": "Run a side car in each worker pod to refresh Kerberos ccache with `airflow kerberos` according to the airflow security configuration", + "type": "object", + "properties": { + "enabled": { + "description": "Enable Kerberos side car on worker pods.", + "type": "boolean" + } + } + }, "resources": { "type": "object" }, @@ -1093,6 +1103,44 @@ } } } + }, + "kerberos": { + "description": "Kerberos configurations for airflow", + "type": "object", + "properties": { + "enabled": { + "description": "Enable kerberos.", + "type": "boolean" + }, + "ccacheMountPath": { + "description": "Path to mount shared volume for kerberos credentials cache.", + "type": "string" + }, + "ccacheFileName": { + "description": "Name for kerberos credentials cache file.", + "type": "string" + }, + "configPath":{ + "description": "Path to mount krb5.conf kerberos configuration file.", + "type": "string" + }, + "keytabPath":{ + "description": "Path to mount the keytab for refreshing credentials in the kerberos sidecar.", + "type": "string" + }, + "principal":{ + "description": "Principal to use when refreshing kerberos credentials.", + "type": "string" + }, + "reinitFrequency": { + "description": "How often (in seconds) airflow kerberos will reinitialize the credentials cache.", + "type": "integer" + }, + "config": { + "description": "Contents of krb5.conf.", + "type": "string" + } + } } } }
