dan-osterrath commented on code in PR #59156: URL: https://github.com/apache/airflow/pull/59156#discussion_r2602222185
########## chart/docs/index.rst: ########## @@ -81,6 +82,12 @@ Features * Supported database backend: ``PostgreSQL``, ``MySQL`` * Autoscaling for ``CeleryExecutor`` provided by KEDA * ``PostgreSQL`` and ``PgBouncer`` with a battle-tested configuration +* **Security enhancements**: + + * Manual Service Account Token Volume configuration for pod-launching executors + * Defense-in-depth security with both ServiceAccount and Pod-level controls + * Compatibility with security policies like Kyverno + Review Comment: Thanks for your feedback. One question: What are the criterias for a "significant change"? It's not a breaking change, as I kept backward compatibility. For me this change is significant, as this is a hard requirement to deploy it to my k8s cluster. For others this seems to be totally irrelevant as no one complained about this missing feature, yet. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
