zach-overflow commented on issue #75865: URL: https://github.com/apache/airflow/issues/75865#issuecomment-6473897990
No issues found from my testing of #73116 and #74244 against Airflow core (`3.4.0rc1`) / task-sdk (`1.4.0rc1`) with Python 3.11 in Breeze, both work as expected. - **Artifacts:** Verified that both the core and Task SDK wheels have no remaining `httpx` imports and use `httpx2` in every migrated module. Task SDK metadata requires `httpx2` + `truststore` and no longer `certifi` (expected, as per the [`httpx2` docs here](https://pydantic.dev/docs/httpx2/get-started/migration/#behavior-differences)). - **Task SDK client works for both HTTP and HTTPS:** ran a test dag using Variable/Connection/XCom API calls and a deferrable task succeeded E2E for both protocols (the latter was run with the API server on a self-signed `[api] ssl_cert`). - **airflow-core in-process transports:** tested the following without error: 1. task execution in `airflow dags test` 2. dag-processor parse-time `Variable.get` API calls 3. a trigger reading a API-based Variable GET. 4. local CLI commands along with the JWKS fetch (local HTTP and public HTTPS). - **truststore TLS matrix (private CA, Linux):** `[api] ssl_ca_file` is trusted. An unknown CA is rejected. A CA added to the system store is trusted via truststore, both by the SDK client and by bare `httpx2`. `client_use_public_certs=False` with `ssl_ca_file` still works. - `httpx2` request lines do not leak into task logs. Did not test: macOS/Windows truststore behaviour described in the significant newsfragment, since this was Linux only. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
