This is an automated email from the ASF dual-hosted git repository.
Miretpl pushed a commit to branch chart/v1-2x-test
in repository https://gitbox.apache.org/repos/asf/airflow.git
The following commit(s) were added to refs/heads/chart/v1-2x-test by this push:
new e329644c993 Warn about Kerberos init container removal (#73390)
e329644c993 is described below
commit e329644c99390112643aad19f457d18b8ae354f0
Author: Aaron Chen <[email protected]>
AuthorDate: Sat Sep 26 05:51:36 2026 -0700
Warn about Kerberos init container removal (#73390)
* Update deprecation warnings for Kerberos init container configuration in
NOTES.txt
* Clarify Kerberos init container deprecation warning
* Warn that the Kerberos container name changes in Chart 2.0
---------
Co-authored-by: Przemysław Mirowski
<[email protected]>
---
chart/templates/NOTES.txt | 38 ++++++++++++++++++++++----------------
1 file changed, 22 insertions(+), 16 deletions(-)
diff --git a/chart/templates/NOTES.txt b/chart/templates/NOTES.txt
index 3765f88e979..385d2ac293b 100644
--- a/chart/templates/NOTES.txt
+++ b/chart/templates/NOTES.txt
@@ -709,37 +709,43 @@ DEPRECATION WARNING:
{{- end }}
-{{- if .Values.workers.kerberosInitContainer.enabled }}
+{{- $legacyKerberosInitContainer := .Values.workers.kerberosInitContainer }}
+{{- if or $legacyKerberosInitContainer.enabled
$legacyKerberosInitContainer.resources
$legacyKerberosInitContainer.securityContexts.container
$legacyKerberosInitContainer.containerLifecycleHooks }}
DEPRECATION WARNING:
- `workers.kerberosInitContainer.enabled` has been renamed to
`workers.celery.kerberosInitContainer.enabled`/`workers.kubernetes.kerberosInitContainer.enabled`.
- Please change your values as support for the old name will be dropped in a
future release.
+ `workers.kerberosInitContainer` will be removed in Chart 2.0.
+ When upgrading to Chart 2.0, configure `workers.celery.kerberosSidecar`
and/or
+ `workers.kubernetes.kerberosSidecar` instead.
+ The `kerberos-init` init container is replaced by the `worker-kerberos`
container, so update
+ anything that refers to it by name, such as log collection, Pod patches,
or monitoring.
{{- end }}
-{{- if .Values.workers.kerberosInitContainer.resources }}
+{{- range $workerType := list "celery" "kubernetes" }}
+{{- $kerberosInitContainer := index (index $.Values.workers $workerType)
"kerberosInitContainer" }}
+{{- $kerberosInitContainerEnabledSet := not (kindIs "invalid"
$kerberosInitContainer.enabled) }}
+{{- if or $kerberosInitContainerEnabledSet $kerberosInitContainer.resources
$kerberosInitContainer.securityContexts.container
$kerberosInitContainer.containerLifecycleHooks }}
DEPRECATION WARNING:
- `workers.kerberosInitContainer.resources` has been renamed to
`workers.celery.kerberosInitContainer.resources`/`workers.kubernetes.kerberosInitContainer.resources`.
- Please change your values as support for the old name will be dropped in a
future release.
+ `workers.{{ $workerType }}.kerberosInitContainer` will be removed in Chart
2.0.
+ When upgrading to Chart 2.0, configure `workers.{{ $workerType
}}.kerberosSidecar` instead.
+ The `kerberos-init` init container is replaced by the `worker-kerberos`
container, so update
+ anything that refers to it by name, such as log collection, Pod patches,
or monitoring.
{{- end }}
-
-{{- if .Values.workers.kerberosInitContainer.securityContexts.container }}
-
- DEPRECATION WARNING:
- `workers.kerberosInitContainer.securityContexts.container` has been
renamed to
`workers.celery.kerberosInitContainer.securityContexts.container`/`workers.kubernetes.kerberosInitContainer.securityContexts.container`.
- Please change your values as support for the old name will be dropped in a
future release.
-
{{- end }}
-{{- if .Values.workers.kerberosInitContainer.containerLifecycleHooks }}
+{{- range $workerSet := .Values.workers.celery.sets }}
+{{- if hasKey $workerSet "kerberosInitContainer" }}
DEPRECATION WARNING:
- `workers.kerberosInitContainer.containerLifecycleHooks` has been renamed
to
`workers.celery.kerberosInitContainer.containerLifecycleHooks`/`workers.kubernetes.kerberosInitContainer.containerLifecycleHooks`.
- Please change your values as support for the old name will be dropped in a
future release.
+ `kerberosInitContainer` in Celery worker set {{ $workerSet.name | quote }}
will be removed in Chart 2.0.
+ When upgrading to Chart 2.0, configure `kerberosSidecar` for that worker
set instead.
+ The `kerberos-init` init container is replaced by the `worker-kerberos`
container, so update
+ anything that refers to it by name, such as log collection, Pod patches,
or monitoring.
{{- end }}
+{{- end }}
{{- if not (empty .Values.workers.resources) }}
