himanshuchawla0807-gif opened a new pull request, #75000: URL: https://github.com/apache/airflow/pull/75000
`airflow kerberos` runs migration checks and log-template synchronization before acquiring tickets. With migration checks enabled and an empty metadata database, it exits before `kinit`, even though ticket renewal does not require the database. Disable the command's mandatory database preflight. Two regression cases cover standard and one-time mode with migration checking enabled and both database helpers configured to fail if called. Existing daemon coverage remains intact. Related: #74850 and the runtime discussion in #74912. This is a separate core prerequisite, with no Helm changes. Released images remain unchanged; removing their Secret references still needs a compatibility strategy. Optional CLI audit logging can still attempt database access. Validation: - New regressions fail before the fix; the related Kerberos/CLI suite passes 62 tests on the refreshed base - Always/CLI non-database suite: 659 passed, 1 expected failure - Regular and prescribed manual static checks passed - Core documentation build passed - Always/CLI database suites passed 1936 and 677 tests respectively - An isolated CLI startup with an empty SQLite database and migration checks enabled reaches stub `kinit`; no live KDC or Kubernetes authentication was tested --- ##### Was generative AI tooling used to co-author this PR? - [X] Yes — OpenAI Codex Generated-by: OpenAI Codex following [the guidelines](https://github.com/apache/airflow/blob/main/contributing-docs/05_pull_requests.rst#gen-ai-assisted-contributions) -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
