aaron-y-chen opened a new pull request, #71221: URL: https://github.com/apache/airflow/pull/71221
related: #35154 ## Summary Add a configurable `klist -s` startup probe to Kerberos worker sidecars as a prerequisite for adopting native Kubernetes sidecars. | File | Purpose and design principle | | --- | --- | | `chart/values.yaml` | Defines default-enabled probe settings for Celery and Kubernetes workers. The approximately 60-second failure window allows time to obtain the initial Kerberos credentials. | | `chart/values.schema.json` | Validates the new settings and intentionally exposes only enablement and timing controls. The probe type and command remain fixed to preserve its Kerberos-specific semantics. | | `chart/templates/workers/worker-deployment.yaml` | Renders the `klist -s` exec probe for the Celery worker Kerberos sidecar. Users of custom images without `klist` can disable it. | | `chart/files/pod-template-file.kubernetes-helm-yaml` | Applies the same probe contract to the KubernetesExecutor worker pod template. | | `chart/tests/helm_tests/security/test_kerberos.py` | Verifies the Celery worker probe's default, customized, and disabled rendering. | | `chart/tests/helm_tests/airflow_aux/test_pod_template_file.py` | Verifies the same three cases for the KubernetesExecutor pod template. | <br> --- ##### Was generative AI tooling used to co-author this PR? <!-- If generative AI tooling has been used in the process of authoring this PR, please change below checkbox to `[X]` followed by the name of the tool, uncomment the "Generated-by". --> - [x] Yes (please specify the tool below) Generated-by: [GPT 5.6-sol] following [the guidelines](https://github.com/apache/airflow/blob/main/contributing-docs/05_pull_requests.rst#gen-ai-assisted-contributions) -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
