Lougarou opened a new pull request, #67074: URL: https://github.com/apache/airflow/pull/67074
`get_kube_client()` derived its `kubernetes.client.Configuration` from the global default and, when `[kubernetes_executor] verify_ssl=False` was set, called `Configuration.set_default()` — mutating the process-wide `Configuration._default` singleton. Other code in the same worker process that later reads the default Configuration would then silently inherit `verify_ssl=False`. This builds a fresh, isolated `Configuration()` for the executor client and applies `verify_ssl` / `ssl_ca_cert` only to that local object — the same isolation #63478 applied to `KubernetesHook`. Executor behaviour is unchanged (TLS verification is still disabled for the executor's own client when configured); only the global-state side effect is dropped. Covered by an updated `test_client.py`: `test_disable_verify_ssl` is replaced by `test_get_kube_client_does_not_pollute_global_default`, which asserts the executor client still has `verify_ssl=False` while the process-wide default Configuration stays untouched. --- ##### Was generative AI tooling used to co-author this PR? - [X] Yes (please specify the tool below) Generated-by: Anthropic Claude (Claude Code) following [the guidelines](https://github.com/apache/airflow/blob/main/contributing-docs/05_pull_requests.rst#gen-ai-assisted-contributions) --- * Read the **[Pull Request Guidelines](https://github.com/apache/airflow/blob/main/contributing-docs/05_pull_requests.rst#pull-request-guidelines)** for more information. Note: commit author/co-author name and email in commits become permanently public when merged. * For fundamental code changes, an Airflow Improvement Proposal ([AIP](https://cwiki.apache.org/confluence/display/AIRFLOW/Airflow+Improvement+Proposals)) is needed. * When adding dependency, check compliance with the [ASF 3rd Party License Policy](https://www.apache.org/legal/resolved.html#category-x). * For significant user-facing changes create newsfragment: `{pr_number}.significant.rst`, in [airflow-core/newsfragments](https://github.com/apache/airflow/tree/main/airflow-core/newsfragments). You can add this file in a follow-up commit after the PR is created so you know the PR number. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
