Duo-ee commented on issue #53192: URL: https://github.com/apache/airflow/issues/53192#issuecomment-6461129107
Correction to my previous comment: the claim that an explicitly supplied `client_configuration.ssl_ca_cert` is overwritten on every path was too broad. In the current hook snapshot I tested, the explicit `in_cluster=True` branch calls `load_incluster_config()` without passing that configuration, and the explicitly supplied CA remains on the resulting API client. By contrast, on the kubeconfig path I tested, loading a kubeconfig without a CA resets the supplied value to `None`; a CA specified in the kubeconfig is loaded instead. This was an offline configuration-level test using the hook source and Kubernetes Python client 33.1.0, not a real-cluster or TLS-handshake test. The explicit hook configuration is not the same as an `ssl_ca_cert` connection extra, and I have not verified all provider versions or async paths. Sorry for the overstatement. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
