dheerenmohta opened a new pull request, #71831: URL: https://github.com/apache/airflow/pull/71831
KubernetesHook only offered a binary disable_verify_ssl switch, with no way to trust a custom or intermediate CA without disabling verification entirely. KubernetesExecutor's kube_client.py already solves this via a kubernetes_executor.ssl_ca_cert config key, so this mirrors that same capability into KubernetesHook (used by KubernetesPodOperator via its hook property), rather than inventing a new mechanism. Adds ssl_ca_cert as a KubernetesHook constructor param and matching Connection-extra field, threaded through every get_conn() branch into the existing _TimeoutK8sApiClient choke point. Also documents the new field in the connections docs. Known gap: AsyncKubernetesHook (deferrable/trigger path) doesn't apply disable_verify_ssl either today, so it isn't covered here — a pre-existing asymmetry, left as follow-up scope rather than guessed at. closes: #53192 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
