Stuck on an issue?

Lightrun Answers was designed to reduce the constant googling that comes with debugging 3rd party libraries. It collects links to all the places you might be looking at while hunting down a tough bug.

And, if you’re still stuck at the end, we’re happy to hop on a call to see how we can help out.

Custom SSL CA CERTIFICATE by Configuration for Kubernetes Executor

See original GitHub issue

Description

Add more configuration settings for the Kubernetes Executor in order to support ssl_ca_cert (parameter for kubernetes-client / python : customize the certificate file to verify the peer).

As an example :

airflow.yaml [kubernetes] ssl_ca_cert =

Use case / motivation

We are prototyping Airflow in a Kubernetes Cluster that is issuing a custom CA Certificate. Since we are not able to add our certificate to the TrustChain, airflow can’t communicate with the API Server.

When no ca_cert is specified, kubernetes-client will use certifi as its TrustChain.

See : https://github.com/kubernetes-client/python/blob/master/kubernetes/client/rest.py#L66

All queries will use urllib3, using certifi’s ca.

Related Issues

N/A

Issue Analytics

State:
Created 3 years ago
Reactions:1
Comments:6 (1 by maintainers)

Top GitHub Comments

1reaction

boring-cyborg[bot]commented, Mar 30, 2020

Thanks for opening your first issue here! Be sure to follow the issue template!

0reactions

eladkalcommented, Jan 17, 2022

cc @jedcunningham WDYT?

Top Results From Across the Web

Improve documentation for setting up custom certificates - GitLab

The first scenario requires both mapping a volume and updating the system CA certificates in pre_build_script (using update-ca-certificates (the ...

Manage TLS Certificates in a Cluster - Kubernetes

Kubernetes provides a certificates.k8s.io API, which lets you provision TLS certificates signed by a Certificate Authority (CA) that you control ...

Kubernetes add ca certificate to pods' trust root - Stack Overflow

So I believe the idea here is that /etc/ssl/certs/ is the location of tls certs that are trusted by pods, and the subPath...

Installing Rancher Server with SSL

The command will configure the server's ca-certificate bundle so that the Rancher services for machine provisioning, catalog and compose executor can ...

Running Spark on Kubernetes - Spark 3.3.1 Documentation

Using Apache YuniKorn as Customized Scheduler for Spark on Kubernetes ... Path to the CA cert file for connecting to the Kubernetes API...