Skip to content

Add workers.celery.securityContexts & workers.kubernetes.securityContexts #60396

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
jscheffl merged 10 commits into from
Jan 12, 2026
Merged

Add workers.celery.securityContexts & workers.kubernetes.securityContexts #60396

Changes from 1 commit
Commits
Show all changes
10 commits
Select commit Hold shift + click to select a range
1b58ea2
Seperate security context tests per Airflow version
Miretpl Jan 11, 2026
f30c665
Add overwrite securityContext tests
Miretpl Jan 11, 2026
6542709
Rewrite airflowPodSecurityContext
Miretpl Jan 11, 2026
294db3e
Rewrite containerSecurityContext
Miretpl Jan 11, 2026
1023f5f
Combine persistence securityContext
Miretpl Jan 11, 2026
4ae2c6c
Misc
Miretpl Jan 11, 2026
2e64852
Add workers.celery.securityContexts & workers.kubernetes.securityCont…
Miretpl Jan 11, 2026
c0b9773
Misc
Miretpl Jan 11, 2026
5ce46d8
Add clarifing comments
Miretpl Jan 11, 2026
72b77c4
Add docsSection for securityContexts
Miretpl Jan 11, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Prev Previous commit
Next Next commit
Misc
  • Loading branch information
@Miretpl
Miretpl committed Jan 12, 2026
commit c0b9773e271e0fa265e14bc668e36f78e01f103d
130 changes: 65 additions & 65 deletions helm-tests/tests/helm_tests/security/test_security_context.py
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -268,14 +268,14 @@ def test_check_local_setting_airflow_2(self):
"uid": 3000,
"gid": 30,
"securityContext": {"runAsUser": 6000, "fsGroup": 60},
"webserver": {**component_contexts},
"workers": {**component_contexts},
"webserver": component_contexts,
"workers": component_contexts,
"flower": {"enabled": True, **component_contexts},
"scheduler": {**component_contexts},
"createUserJob": {**component_contexts},
"migrateDatabaseJob": {**component_contexts},
"triggerer": {**component_contexts},
"redis": {**component_contexts},
"scheduler": component_contexts,
"createUserJob": component_contexts,
"migrateDatabaseJob": component_contexts,
"triggerer": component_contexts,
"redis": component_contexts,
"statsd": {"enabled": True, **component_contexts},
"airflowVersion": "2.11.0",
"executor": "CeleryKubernetesExecutor",
Expand Down Expand Up @@ -381,7 +381,7 @@ def test_check_local_uid(self):
component_contexts = {"uid": 3000, "securityContext": {"runAsUser": 7000}}
docs = render_chart(
values={
"redis": {**component_contexts},
"redis": component_contexts,
"statsd": {"enabled": True, **component_contexts},
},
show_only=[
Expand Down Expand Up @@ -467,16 +467,16 @@ def test_main_container_setting_airflow_2(self, workers_values):
values={
"executor": "CeleryExecutor,KubernetesExecutor",
"cleanup": {"enabled": True, **security_context},
"scheduler": {**security_context},
"webserver": {**security_context},
"scheduler": security_context,
"webserver": security_context,
"workers": workers_values,
"flower": {"enabled": True, **security_context},
"statsd": {**security_context},
"createUserJob": {**security_context},
"migrateDatabaseJob": {**security_context},
"triggerer": {**security_context},
"statsd": security_context,
"createUserJob": security_context,
"migrateDatabaseJob": security_context,
"triggerer": security_context,
"pgbouncer": {"enabled": True, **security_context},
"redis": {**security_context},
"redis": security_context,
"airflowVersion": "2.11.0",
},
show_only=[
Expand Down Expand Up @@ -516,17 +516,17 @@ def test_main_container_setting(self, workers_values):
values={
"executor": "CeleryExecutor,KubernetesExecutor",
"cleanup": {"enabled": True, **security_context},
"scheduler": {**security_context},
"dagProcessor": {**security_context},
"apiServer": {**security_context},
"scheduler": security_context,
"dagProcessor": security_context,
"apiServer": security_context,
"workers": workers_values,
"flower": {"enabled": True, **security_context},
"statsd": {**security_context},
"createUserJob": {**security_context},
"migrateDatabaseJob": {**security_context},
"triggerer": {**security_context},
"statsd": security_context,
"createUserJob": security_context,
"migrateDatabaseJob": security_context,
"triggerer": security_context,
"pgbouncer": {"enabled": True, **security_context},
"redis": {**security_context},
"redis": security_context,
},
show_only=[
"templates/cleanup/cleanup-cronjob.yaml",
Expand Down Expand Up @@ -557,10 +557,10 @@ def test_log_groomer_sidecar_container_setting(self):
spec = {"logGroomerSidecar": {"securityContexts": {"container": ctx_value}}}
docs = render_chart(
values={
"scheduler": {**spec},
"workers": {**spec},
"dagProcessor": {**spec},
"triggerer": {**spec},
"scheduler": spec,
"workers": spec,
"dagProcessor": spec,
"triggerer": spec,
},
show_only=[
"templates/scheduler/scheduler-deployment.yaml",
Expand Down Expand Up @@ -613,9 +613,9 @@ def test_wait_for_migrations_init_container_setting_airflow_2(self):
}
docs = render_chart(
values={
"scheduler": {**spec},
"webserver": {**spec},
"triggerer": {**spec},
"scheduler": spec,
"webserver": spec,
"triggerer": spec,
"workers": {"waitForMigrations": {"securityContexts": {"container": ctx_value}}},
"airflowVersion": "2.11.0",
},
Expand All @@ -640,10 +640,10 @@ def test_wait_for_migrations_init_container_setting(self):
}
docs = render_chart(
values={
"scheduler": {**spec},
"apiServer": {**spec},
"triggerer": {**spec},
"dagProcessor": {**spec},
"scheduler": spec,
"apiServer": spec,
"triggerer": spec,
"dagProcessor": spec,
"workers": {"waitForMigrations": {"securityContexts": {"container": ctx_value}}},
},
show_only=[
Expand Down Expand Up @@ -712,16 +712,16 @@ def test_main_pod_setting_airflow_2(self, workers_values):
values={
"executor": "CeleryExecutor,KubernetesExecutor",
"cleanup": {"enabled": True, **security_context},
"scheduler": {**security_context},
"webserver": {**security_context},
"scheduler": security_context,
"webserver": security_context,
"workers": workers_values,
"flower": {"enabled": True, **security_context},
"statsd": {**security_context},
"createUserJob": {**security_context},
"migrateDatabaseJob": {**security_context},
"triggerer": {**security_context},
"statsd": security_context,
"createUserJob": security_context,
"migrateDatabaseJob": security_context,
"triggerer": security_context,
"pgbouncer": {"enabled": True, **security_context},
"redis": {**security_context},
"redis": security_context,
"airflowVersion": "2.11.0",
},
show_only=[
Expand Down Expand Up @@ -758,17 +758,17 @@ def test_main_pod_setting(self, workers_values):
values={
"executor": "CeleryExecutor,KubernetesExecutor",
"cleanup": {"enabled": True, **security_context},
"scheduler": {**security_context},
"apiServer": {**security_context},
"scheduler": security_context,
"apiServer": security_context,
"workers": workers_values,
"flower": {"enabled": True, **security_context},
"statsd": {**security_context},
"createUserJob": {**security_context},
"migrateDatabaseJob": {**security_context},
"triggerer": {**security_context},
"statsd": security_context,
"createUserJob": security_context,
"migrateDatabaseJob": security_context,
"triggerer": security_context,
"pgbouncer": {"enabled": True, **security_context},
"redis": {**security_context},
"dagProcessor": {**security_context},
"redis": security_context,
"dagProcessor": security_context,
},
show_only=[
"templates/cleanup/cleanup-cronjob.yaml",
Expand Down Expand Up @@ -799,15 +799,15 @@ def test_main_pod_setting_legacy_security_airflow_2(self):
values={
"executor": "CeleryExecutor,KubernetesExecutor",
"cleanup": {"enabled": True, **security_context},
"scheduler": {**security_context},
"webserver": {**security_context},
"workers": {**security_context},
"scheduler": security_context,
"webserver": security_context,
"workers": security_context,
"flower": {"enabled": True, **security_context},
"statsd": {**security_context},
"createUserJob": {**security_context},
"migrateDatabaseJob": {**security_context},
"triggerer": {**security_context},
"redis": {**security_context},
"statsd": security_context,
"createUserJob": security_context,
"migrateDatabaseJob": security_context,
"triggerer": security_context,
"redis": security_context,
"airflowVersion": "2.11.0",
},
show_only=[
Expand Down Expand Up @@ -836,15 +836,15 @@ def test_main_pod_setting_legacy_security(self):
values={
"executor": "CeleryExecutor,KubernetesExecutor",
"cleanup": {"enabled": True, **security_context},
"scheduler": {**security_context},
"workers": {**security_context},
"scheduler": security_context,
"workers": security_context,
"flower": {"enabled": True, **security_context},
"statsd": {**security_context},
"createUserJob": {**security_context},
"migrateDatabaseJob": {**security_context},
"triggerer": {**security_context},
"redis": {**security_context},
"dagProcessor": {**security_context},
"statsd": security_context,
"createUserJob": security_context,
"migrateDatabaseJob": security_context,
"triggerer": security_context,
"redis": security_context,
"dagProcessor": security_context,
},
show_only=[
"templates/cleanup/cleanup-cronjob.yaml",
Expand Down