prasad5501 opened a new issue, #38257: URL: https://github.com/apache/airflow/issues/38257
### Apache Airflow version Other Airflow 2 version (please specify below) ### If "Other Airflow 2 version" selected, which one? 2.5.3 ### What happened? Hello Team, We are trying to deploy Airflow as non-root user in a secure kubernetes environment. Once the helm chart is deployed the web, scheduler and sync users deployment start failing with error - PermissionError: [Errno 13] Permission denied: 'bash' We are not allowed to use bash instead we use /bin/sh. So here is what I have understood from stacktrace that whenever a airflow command Ex. airflow version or airflow scheduler is executed it triggers a python script in backend which then uses subprocess.popen to run some shell command and its using bash as default. Is there a way we can override it to use /bin/sh ? Any help on this is highly appreciated. Thanks in advance ### What you think should happen instead? To run with the allowed shell /bin/sh ### How to reproduce remove the permission for the /bin/bash in kubernetes ### Operating System Debian GNU 11 (bullseye) ### Versions of Apache Airflow Providers apache-airflow-providers-amazon==7.3.0 apache-airflow-providers-apache-spark==1.0.3 apache-airflow-providers-celery==3.1.0 apache-airflow-providers-cncf-kubernetes==5.2.2 apache-airflow-providers-common-sql==1.3.4 apache-airflow-providers-docker==3.5.1 apache-airflow-providers-elasticsearch==4.4.0 apache-airflow-providers-ftp==3.3.1 apache-airflow-providers-google==8.11.0 apache-airflow-providers-grpc==3.1.0 apache-airflow-providers-hashicorp==3.3.0 apache-airflow-providers-http==4.2.0 apache-airflow-providers-imap==3.1.1 apache-airflow-providers-microsoft-azure==5.2.1 apache-airflow-providers-mysql==4.0.2 apache-airflow-providers-odbc==3.2.1 apache-airflow-providers-postgres==5.4.0 apache-airflow-providers-redis==3.1.0 apache-airflow-providers-sendgrid==3.1.0 apache-airflow-providers-sftp==4.2.4 apache-airflow-providers-slack==7.2.0 apache-airflow-providers-snowflake==4.0.4 apache-airflow-providers-sqlite==3.3.1 apache-airflow-providers-ssh==3.5.0 ### Deployment Other 3rd-party Helm chart ### Deployment details Kubernetes version 1.16 ### Anything else? Everytime we deploy in a secure environment. ### Are you willing to submit PR? - [ ] Yes I am willing to submit a PR! ### Code of Conduct - [X] I agree to follow this project's [Code of Conduct](https://github.com/apache/airflow/blob/main/CODE_OF_CONDUCT.md) -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
