nirousseau opened a new issue #8019: Custom Kubernetes Executor SSL CA 
CERTIFICATE by Configuration
URL: https://github.com/apache/airflow/issues/8019
 
 
   **Description**
   
   Add more configuration settings for the _Kubernetes Executor_ in order to 
support `ssl_ca_cert` (parameter for **kubernetes-client / python** : customize 
the certificate file to verify the peer).
   
   As an example :
   
   `airflow.yaml`
   `
   [kubernetes]
   ssl_ca_cert = 
   `
   
   **Use case / motivation**
   
   We are prototyping Airflow in a Kubernetes Cluster that is issuing a custom 
CA Certificate. Since we are not able to add our certificate to the TrustChain, 
airflow can't communicate with the API Server.
   
   When no `ca_cert` is specified, **kubernetes-client** will use **certifi** 
as its TrustChain. 
   
   See : 
https://github.com/kubernetes-client/python/blob/master/kubernetes/client/rest.py#L72
   
   All queries will use urllib3, using **certifi**'s ca.
   
   **Related Issues**
   
   N/A
   

----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
 
For queries about this service, please contact Infrastructure at:
[email protected]


With regards,
Apache Git Services

Reply via email to