Adds missing schema for kerberos sidecar configuration (#11413)

* Adds missing schema for kerberos sidecar configuration The kerberos support added in #11130 did not have schema added to the values.yml. This PR fixes it. Co-authored-by: Jacob Ferriero <[email protected]> * Update chart/values.schema.json Co-authored-by: Jacob Ferriero <[email protected]>
apache · Oct 12, 2020 · 9142eed · 9142eed
1 parent b1fcac2
commit 9142eed
Showing 1 changed file with 48 additions and 0 deletions.
diff --git a/chart/values.schema.json b/chart/values.schema.json
@@ -823,6 +823,16 @@
                         }
                     }
                 },
+                "kerberosSidecar": {
+                    "description": "Run a side car in each worker pod to refresh Kerberos ccache with `airflow kerberos` according to the airflow security configuration",
+                    "type": "object",
+                    "properties": {
+                        "enabled": {
+                            "description": "Enable Kerberos side car on worker pods.",
+                            "type": "boolean"
+                        }
+                    }
+                },
                 "resources": {
                     "type": "object"
                 },
@@ -1093,6 +1103,44 @@
                     }
                 }
             }
+        },
+        "kerberos": {
+            "description": "Kerberos configurations for airflow",
+            "type": "object",
+            "properties": {
+                "enabled": {
+                    "description": "Enable kerberos.",
+                    "type": "boolean"
+                },
+                "ccacheMountPath": {
+                    "description": "Path to mount shared volume for kerberos credentials cache.",
+                    "type": "string"
+                },
+                "ccacheFileName": {
+                    "description": "Name for kerberos credentials cache file.",
+                    "type": "string"
+                },
+                "configPath":{
+                    "description": "Path to mount krb5.conf kerberos configuration file.",
+                    "type": "string"
+                },
+                "keytabPath":{
+                    "description": "Path to mount the keytab for refreshing credentials in the kerberos sidecar.",
+                    "type": "string"
+                },
+                "principal":{
+                    "description": "Principal to use when refreshing kerberos credentials.",
+                    "type": "string"
+                },
+                "reinitFrequency": {
+                    "description": "How often (in seconds) airflow kerberos will reinitialize the credentials cache.",
+                    "type": "integer"
+                },
+                "config": {
+                    "description": "Contents of krb5.conf.",
+                    "type": "string"
+                }
+              }
         }
     }
 }