amoghrajesh commented on PR #35146: URL: https://github.com/apache/airflow/pull/35146#issuecomment-1777281586
> > I think we should also actually modify the Helm chart of ours to add kerberos init container in case kerberos is enabled - that would be not only good (the token would be refreshed when airflow starts) but also serve as an example to others who want to use it. > > I dont know about this. My use case for example requires side car. Init container wont be good enough. I use Hive and tasks can run for even 20 hours. Running kerberos one time in init container is not enough - it wont support refresh. When deployed on Celery this wasnt an issue because we could just run it on workers that were always live. We should be doing an init container + sidecar model. Init container ensures early exit in case kinit fails -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
