deepnemesis opened a new pull request, #74271: URL: https://github.com/apache/airflow/pull/74271
Apply additional security-context defaults to the git-sync sidecar and init containers. The default context now: - preserves the dedicated git-sync UID - disables privilege escalation - drops all Linux capabilities Explicit `dags.gitSync.securityContexts.container` values remain authoritative, and `securityContexts.disableDefaults: true` continues to omit all defaults. Tests cover the default context for both container variants, explicit override behavior, and disabled defaults. The values documentation and schema description have also been updated. `git diff --check`, Python syntax validation, and schema validation pass. Full Helm tests could not run locally because Windows dependency setup requires Microsoft Visual C++ to build `python-ldap`. closes: #74270 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
