andrewhharmon opened a new pull request, #61731:
URL: https://github.com/apache/airflow/pull/61731
Fix two bugs in the EKS hook's kubeconfig exec credential plugin:
1. **`source` → `.` (POSIX dot command):** The `COMMAND` template uses
`source` to load credentials, but `source` is a bash builtin that doesn't exist
in `dash`, which is the default `/bin/sh` on Debian/Ubuntu-based containers
(Astronomer, official Airflow images). This causes silent credential
loading failures, leading to 401 Unauthorized errors in cloud environments
where no fallback AWS credentials exist.
2. **ExecCredential `apiVersion` `v1alpha1` → `v1`:** `v1alpha1` was
removed from Kubernetes client-go in K8s 1.24 (June 2022). `v1` has been
available since K8s 1.22 and all currently supported EKS versions support it.
This is
client-side only — the EKS cluster never sees the ExecCredential
apiVersion.
closes: #60269
---
##### Was generative AI tooling used to co-author this PR?
- [X] Yes — Claude Code (Claude Opus 4.6)
Generated-by: Claude Code following [the
guidelines](https://github.com/apache/airflow/blob/main/contributing-docs/05_pull_requests.rst#gen-ai-assisted-contributions)
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
