The GitHub Actions job "Tests" on 
airflow.git/fix/kubernetes-hook-verify-ssl-56432 has failed.
Run started by GitHub user antonio-mello-ai (triggered by antonio-mello-ai).

Head commit for run:
c9fe02967ecaceb9bd7fd79b182b1aca918f34ab / Antonio <[email protected]>
Fix KubernetesHook verify_ssl flag not applied to returned ApiClient

When disable_verify_ssl=True, _disable_verify_ssl() sets the global
Configuration default via Configuration.set_default(). However,
config.load_kube_config() called immediately after with
client_configuration=None creates a fresh Configuration instance,
loads the kubeconfig into it (with verify_ssl=True), and overwrites
the global default via Configuration.set_default() again. The
_TimeoutK8sApiClient() created without arguments then calls
Configuration.get_default_copy() and gets verify_ssl=True.

Fix by ensuring that when disable_verify_ssl=True, self.client_configuration
is initialized from the updated default (with verify_ssl=False) before
calling load_kube_config(), then re-applying verify_ssl=False after the
load (since load_and_set() may overwrite it), and finally passing the
configuration explicitly to _TimeoutK8sApiClient.

Closes #56432

Co-Authored-By: Claude Opus 4.6 <[email protected]>

Report URL: https://github.com/apache/airflow/actions/runs/23023709419

With regards,
GitHub Actions via GitBox


---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to