This is an automated email from the ASF dual-hosted git repository.
jedcunningham pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/airflow.git
The following commit(s) were added to refs/heads/main by this push:
new 908cd438169 Chart: fix securityContext.containers/ingress.apiServer in
values.schema.json (#60575)
908cd438169 is described below
commit 908cd4381690f64ff574937018a6021fbebc3ac7
Author: Aakcht <[email protected]>
AuthorDate: Thu Jan 15 21:38:21 2026 +0500
Chart: fix securityContext.containers/ingress.apiServer in
values.schema.json (#60575)
---
chart/values.schema.json | 114 +++++++++++++++++++++++++++++++++++++++-
scripts/ci/prek/chart_schema.py | 4 ++
2 files changed, 117 insertions(+), 1 deletion(-)
diff --git a/chart/values.schema.json b/chart/values.schema.json
index 8c4ae66eb42..a109c50a83b 100644
--- a/chart/values.schema.json
+++ b/chart/values.schema.json
@@ -129,7 +129,7 @@
}
]
},
- "container": {
+ "containers": {
"description": "Default container security context
definition. The values in this parameter will be used when `securityContexts`
is not defined for specific containers",
"type": "object",
"$ref": "#/definitions/io.k8s.api.core.v1.SecurityContext",
@@ -256,6 +256,118 @@
],
"default": null
},
+ "apiServer": {
+ "description": "Configuration for the Ingress of the API
server.",
+ "type": "object",
+ "additionalProperties": false,
+ "properties": {
+ "enabled": {
+ "description": "Enable API server ingress
resource.",
+ "type": "boolean",
+ "default": false
+ },
+ "annotations": {
+ "description": "Annotations for the API server
Ingress.",
+ "type": "object",
+ "default": {},
+ "additionalProperties": {
+ "type": "string"
+ }
+ },
+ "path": {
+ "description": "The path for the API server
Ingress.",
+ "type": "string",
+ "default": "/"
+ },
+ "pathType": {
+ "description": "The pathType for the API server
Ingress (required for Kubernetes 1.19 and above).",
+ "type": "string",
+ "default": "ImplementationSpecific"
+ },
+ "host": {
+ "description": "The hostname for the API server
Ingress. (Deprecated - renamed to `ingress.apiServer.hosts`)",
+ "type": "string",
+ "default": ""
+ },
+ "hosts": {
+ "description": "The hostnames or hosts
configuration for the API server Ingress.",
+ "type": "array",
+ "default": [],
+ "items": {
+ "oneOf": [
+ {
+ "type": "object",
+ "additionalProperties": false,
+ "properties": {
+ "name": {
+ "description": "The hostname
for the API server Ingress.",
+ "type": "string",
+ "default": ""
+ },
+ "tls": {
+ "description": "Configuration
for API server Ingress TLS.",
+ "type": "object",
+ "additionalProperties": false,
+ "properties": {
+ "enabled": {
+ "description": "Enable
TLS termination for the API server Ingress.",
+ "type": "boolean",
+ "default": false
+ },
+ "secretName": {
+ "description": "The
name of a pre-created Secret containing a TLS private key and certificate.",
+ "type": "string",
+ "default": ""
+ }
+ }
+ }
+ },
+ "required": [
+ "name"
+ ]
+ },
+ {
+ "type": "string",
+ "default": "",
+ "$comment": "Deprecated by object
above"
+ }
+ ]
+ }
+ },
+ "ingressClassName": {
+ "description": "The Ingress Class for the API
server Ingress.",
+ "type": "string",
+ "default": ""
+ },
+ "tls": {
+ "description": "Configuration for API server
Ingress TLS. (Deprecated - renamed to `ingress.apiServer.hosts[*].tls`)",
+ "type": "object",
+ "additionalProperties": false,
+ "properties": {
+ "enabled": {
+ "description": "Enable TLS termination for
the API server Ingress.",
+ "type": "boolean",
+ "default": false
+ },
+ "secretName": {
+ "description": "The name of a pre-created
Secret containing a TLS private key and certificate.",
+ "type": "string",
+ "default": ""
+ }
+ }
+ },
+ "precedingPaths": {
+ "description": "HTTP paths to add to the API
server Ingress before the default path.",
+ "type": "array",
+ "default": []
+ },
+ "succeedingPaths": {
+ "description": "HTTP paths to add to the API
server Ingress after the default path.",
+ "type": "array",
+ "default": []
+ }
+ }
+ },
"web": {
"description": "Configuration for the Ingress of the web
Service.",
"type": "object",
diff --git a/scripts/ci/prek/chart_schema.py b/scripts/ci/prek/chart_schema.py
index ba92be20975..ba1bc63eb2a 100755
--- a/scripts/ci/prek/chart_schema.py
+++ b/scripts/ci/prek/chart_schema.py
@@ -31,6 +31,10 @@ if __name__ not in ("__main__", "__mp_main__"):
CHART_DIR = AIRFLOW_ROOT_PATH / "chart"
KNOWN_INVALID_TYPES = {
+ # I don't know the data structure for this type with 100 certainty. We
have no tests.
+
"$['properties']['ingress']['properties']['apiServer']['properties']['precedingPaths']",
+ # I don't know the data structure for this type with 100 certainty. We
have no tests.
+
"$['properties']['ingress']['properties']['apiServer']['properties']['succeedingPaths']",
# I don't know the data structure for this type with 100 certainty. We
have no tests.
"$['properties']['ingress']['properties']['web']['properties']['precedingPaths']",
# I don't know the data structure for this type with 100 certainty. We
have no tests.
