Skip to content

Conversation

@ashokkumar-srinivas
Copy link
Contributor

@ashokkumar-srinivas ashokkumar-srinivas commented Oct 4, 2023

What issues does your PR fix?

  • N/A

What does your PR do?

Currently, if a user wants to allow airflow Pods to read Secret resources, they must set rbac.enabled to false and provision their own Role/RoleBinding.

This PR adds the following values:

  • rbac.secrets (default: false)
    • If true, the RBAC Role used by airflow Pods will be allowed to GET/LIST/WATCH on Secret resources

Checklist

For all Pull Requests

@ashokkumar-srinivas ashokkumar-srinivas changed the title modified role template to allow SA to read k8s secrets in airflow ns feat: modified role template to allow SA to read k8s secrets in airflow ns Oct 4, 2023
@stale
Copy link

stale bot commented Dec 15, 2023

This issue has been automatically marked as stale because it has not had activity in 60 days.
It will be closed in 7 days if no further activity occurs.

Thank you for your contributions.


Issues never become stale if any of the following is true:

  1. they are added to a Project
  2. they are added to a Milestone
  3. they have the lifecycle/frozen label

@stale stale bot added the lifecycle/stale lifecycle - this is stale label Dec 15, 2023
@thesuperzapper thesuperzapper added this to the airflow-8.9.0 milestone May 1, 2024
@stale stale bot removed the lifecycle/stale lifecycle - this is stale label May 1, 2024
@thesuperzapper thesuperzapper changed the title feat: modified role template to allow SA to read k8s secrets in airflow ns feat: add optional rbac.secrets value to give GET/LIST/WATCH on Secrets May 1, 2024
Signed-off-by: Mathew Wicks <[email protected]>
Copy link
Member

@thesuperzapper thesuperzapper left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@ashokkumar-srinivas sorry for the extreme delay, but I have pushed a small cleanup to the PR in cb659ab

We will include this in the next version of the chart!

@thesuperzapper thesuperzapper added the status/ready-to-merge status - this will be merged into next release label May 1, 2024
@thesuperzapper thesuperzapper merged commit a9513df into airflow-helm:main May 1, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

status/ready-to-merge status - this will be merged into next release

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants