Airflow Summit 2021 is coming July 8-16. Register now!

Parameters reference

The following tables lists the configurable parameters of the Airflow chart and their default values.

Common

Parameter

Description

Default

airflowLocalSettings

airflow_local_settings file as a string.

~

airflowVersion

Airflow version (Used to make some decisions based on Airflow Version being deployed).

2.0.2

config

Settings to go into the mounted airflow.cfg

See values.yaml

defaultAirflowRepository

Default airflow repository. Overrides all the specific images below.

apache/airflow

defaultAirflowTag

Default airflow tag to deploy.

2.0.2

executor

Airflow executor.

CeleryExecutor

fernetKey

The Fernet key used to encrypt passwords.

~

pgbouncer.enabled

Enable PgBouncer.

False

webserver.defaultUser.enabled

Enable default user creation.

True

webserver.webserverConfig

This will be mounted into the Airflow webserver as a custom webserver_config.py. You can bake a webserver_config.py in to your image instead.

~

Examples:

webserverConfig: |-
  from airflow import configuration as conf

  # The SQLAlchemy connection string.
  SQLALCHEMY_DATABASE_URI = conf.get('core', 'SQL_ALCHEMY_CONN')

  # Flask-WTF flag for CSRF
  CSRF_ENABLED = True

Airflow

Parameter

Description

Default

airflowHome

Airflow home directory. Used for mount paths.

/opt/airflow

allowPodLaunching

Whether various Airflow components launch pods.

True

dags.gitSync.branch

Git branch

v2-1-stable

dags.gitSync.containerName

Git sync container name.

git-sync

dags.gitSync.credentialsSecret

Name of a Secret containing the repo GIT_SYNC_USERNAME and GIT_SYNC_PASSWORD.

~

dags.gitSync.depth

Repository depth.

1

dags.gitSync.dest

Destination folder.

repo

dags.gitSync.enabled

Enable Git sync.

False

dags.gitSync.env

Environment variables for git sync container.

[]

Examples:

env:
- name: GIT_SYNC_TIMEOUT
  value: '60'

dags.gitSync.excludeWebserver

Disable Git sync on webserver as it is not needed when DAG Serialization is enabled.

False

dags.gitSync.extraVolumeMounts

Mount additional volumes into git sync container.

[]

dags.gitSync.knownHosts

When using a ssh private key, the contents of your known_hosts file.

~

Examples:

knownHosts: |-
  <host1>,<ip1> <key1>
  <host2>,<ip2> <key2>
knownHosts: <host1>,<ip1> <key1>

dags.gitSync.maxFailures

The number of consecutive failures allowed before aborting.

0

dags.gitSync.repo

Git repository.

https://github.com/apache/airflow.git

dags.gitSync.rev

Git revision.

HEAD

dags.gitSync.root

Root directory.

/git

dags.gitSync.sshKeySecret

Name of a Secret containing the repo sshKeySecret.

~

dags.gitSync.subPath

Subpath within the repo where dags are located.

tests/dags

dags.gitSync.uid

Git sync container run as user parameter.

65533

dags.gitSync.wait

Interval between git sync attempts in seconds.

60

dags.persistence.accessMode

Access mode of the persistent volume.

ReadWriteOnce

dags.persistence.enabled

Enable persistent volume for storing dags.

False

dags.persistence.existingClaim

The name of an existing PVC to use.

~

dags.persistence.size

Volume size for dags.

1Gi

dags.persistence.storageClassName

If using a custom StorageClass, pass name here.

~

elasticsearch.connection

Elasticsearch connection configuration.

{}

Examples:

connection:
  email: '...'
  host: '...'
  pass: '...'
  user: '...'

elasticsearch.enabled

Enable Elasticsearch task logging.

False

elasticsearch.secretName

A secret containing the connection string.

~

env

Environment variables for all Airflow containers.

[]

Examples:

env:
- name: MYENVVAR
  value: something_fun

extraEnv

Extra env ‘items’ that will be added to the definition of Airflow containers; a string is expected (can be templated).

~

Examples:

extraEnv: |-
  - name: AIRFLOW__CORE__LOAD_EXAMPLES
     value: True

extraEnvFrom

Extra envFrom ‘items’ that will be added to the definition of Airflow containers; a string is expected (can be templated).

~

Examples:

extraEnvFrom: |-
  - secretRef:
    name: '{{ .Release.Name }}-airflow-connections'
extraEnvFrom: |-
  - configMapRef:
    name: '{{ .Release.Name }}-airflow-variables'

fernetKeySecretName

The Fernet key secret name.

~

gid

Group of airflow user.

0

logs.persistence.enabled

Enable persistent volume for storing logs.

False

logs.persistence.existingClaim

The name of an existing PVC to use.

~

logs.persistence.size

Volume size for logs.

100Gi

logs.persistence.storageClassName

If using a custom StorageClass, pass name here.

~

multiNamespaceMode

Whether the KubernetesExecutor can launch workers and pods in multiple namespaces

False

podTemplate

pod_template used for KubernetesExecutor workers

~

secret

Secrets for all Airflow containers.

[]

Examples:

secret:
- envName: SecretEnvVar
  secretKey: somekey
  secretName: somesecret

uid

User of airflow user.

50000

Images

Parameter

Description

Default

images.airflow.pullPolicy

The airflow image pull policy.

IfNotPresent

images.airflow.repository

The airflow image repository.

~

images.airflow.tag

The airflow image tag.

~

images.flower.pullPolicy

The flower image pull policy.

IfNotPresent

images.flower.repository

The flower image repository.

~

images.flower.tag

The flower image tag.

~

images.gitSync.pullPolicy

The gitSync image pull policy.

IfNotPresent

images.gitSync.repository

The gitSync image repository.

k8s.gcr.io/git-sync/git-sync

images.gitSync.tag

The gitSync image tag.

v3.3.0

images.pgbouncer.pullPolicy

The PgBouncer image pull policy.

IfNotPresent

images.pgbouncer.repository

The PgBouncer image repository.

apache/airflow

images.pgbouncer.tag

The PgBouncer image tag.

airflow-pgbouncer-2021.04.28-1.14.0

images.pgbouncerExporter.pullPolicy

The PgBouncer exporter image pull policy.

IfNotPresent

images.pgbouncerExporter.repository

The PgBouncer exporter image repository.

apache/airflow

images.pgbouncerExporter.tag

The PgBouncer exporter image tag.

airflow-pgbouncer-exporter-2021.04.28-0.5.0

images.pod_template.pullPolicy

The pod_template image pull policy.

IfNotPresent

images.pod_template.repository

The pod_template image repository.

~

images.pod_template.tag

The pod_template image tag.

~

images.redis.pullPolicy

The redis image pull policy.

IfNotPresent

images.redis.repository

The redis image repository.

redis

images.redis.tag

The redis image tag.

6-buster

images.statsd.pullPolicy

The statsd image pull policy.

IfNotPresent

images.statsd.repository

The statsd image repository.

apache/airflow

images.statsd.tag

The statsd image tag.

airflow-statsd-exporter-2021.04.28-v0.17.0

Ports

Parameter

Description

Default

ports.airflowUI

Airflow UI port.

8080

ports.flowerUI

Flower UI port.

5555

ports.pgbouncer

PgBouncer port.

6543

ports.pgbouncerScrape

PgBouncer scrape port.

9127

ports.redisDB

Redis port.

6379

ports.statsdIngest

StatsD ingest port.

9125

ports.statsdScrape

StatsD scrape port.

9102

ports.workerLogs

Worker logs port.

8793

Database

Parameter

Description

Default

data.metadataConnection.db

The name of the database.

postgres

data.metadataConnection.host

The database host.

~

data.metadataConnection.pass

The user’s password.

postgres

data.metadataConnection.port

The database port.

5432

data.metadataConnection.protocol

The database protocol.

postgresql

data.metadataConnection.sslmode

The database SSL parameter.

disable

data.metadataConnection.user

The database user.

postgres

data.metadataSecretName

Metadata connection string secret.

~

data.resultBackendConnection

Result backend connection configuration.

~

data.resultBackendConnection.db

The name of the database.

~

data.resultBackendConnection.host

The database host.

~

data.resultBackendConnection.pass

The database password.

~

data.resultBackendConnection.port

The database port.

~

data.resultBackendConnection.protocol

The database protocol.

~

data.resultBackendConnection.sslmode

The database SSL parameter.

~

data.resultBackendConnection.user

The database user.

~

data.resultBackendSecretName

Result backend connection string secret.

~

postgresql.enabled

Enable PostgreSQL subchart.

True

postgresql.postgresqlPassword

PostgreSQL password.

postgres

postgresql.postgresqlUsername

PostgreSQL username.

postgres

PgBouncer

Parameter

Description

Default

pgbouncer.affinity

Specify scheduling constraints for PgBouncer pods.

{}

pgbouncer.ciphers

The allowed ciphers, might be ‘fast’, ‘normal’ or list ciphers separated with ‘:’.

normal

pgbouncer.configSecretName

The PgBouncer config Secret name.

~

pgbouncer.extraNetworkPolicies

Additional NetworkPolicies as needed.

[]

pgbouncer.logConnections

Log successful logins.

0

pgbouncer.logDisconnections

Log disconnections with reasons.

0

pgbouncer.maxClientConn

Maximum clients that can connect to PgBouncer (higher = more file descriptors).

100

pgbouncer.metadataPoolSize

Metadata pool size.

10

pgbouncer.nodeSelector

Select certain nodes for PgBouncer pods.

{}

pgbouncer.podDisruptionBudget.config.maxUnavailable

Max unavailable pods for PgBouncer.

1

pgbouncer.podDisruptionBudget.enabled

Enabled PodDistributionBudget.

False

pgbouncer.resources

Resources for the PgBouncer pods.

{}

Examples:

resources:
  limits:
    cpu: 100m
    memory: 128Mi
  requests:
    cpu: 100m
    memory: 128Mi

pgbouncer.resultBackendPoolSize

Result backend pool size.

5

pgbouncer.service.extraAnnotations

Extra annotations for the PgBouncer Service.

{}

pgbouncer.serviceAccount.annotations

Annotations to add to the worker Kubernetes ServiceAccount.

{}

pgbouncer.serviceAccount.create

Specifies whether a ServiceAccount should be created.

True

pgbouncer.serviceAccount.name

The name of the ServiceAccount to use. If not set and create is true, a name is generated using the release name.

~

pgbouncer.ssl.ca

Certificate Authority for server side

~

pgbouncer.ssl.cert

Server Certificate for server side

~

pgbouncer.ssl.key

Private key used to authenticate with the server

~

pgbouncer.sslmode

SSL mode for PgBouncer.

prefer

pgbouncer.tolerations

Specify Tolerations for PgBouncer pods.

[]

pgbouncer.uid

PgBouncer run as user parameter.

65534

pgbouncer.verbose

Increase PgBouncer verbosity.

0

Scheduler

Parameter

Description

Default

scheduler.affinity

Specify scheduling constraints for scheduler pods.

{}

scheduler.extraContainers

Launch additional containers into scheduler.

[]

scheduler.extraVolumeMounts

Mount additional volumes into scheduler.

[]

scheduler.extraVolumes

Mount additional volumes into scheduler.

[]

scheduler.livenessProbe.failureThreshold

Scheduler Liveness probe failure threshold.

10

scheduler.livenessProbe.initialDelaySeconds

Scheduler Liveness probe initial delay.

10

scheduler.livenessProbe.periodSeconds

Webserver Liveness probe period seconds.

30

scheduler.livenessProbe.timeoutSeconds

Scheduler Liveness probe timeout seconds.

5

scheduler.nodeSelector

Select certain nodes for scheduler pods.

{}

scheduler.podDisruptionBudget.config.maxUnavailable

Max unavailable pods for scheduler.

1

scheduler.podDisruptionBudget.enabled

Enable pod disruption budget.

False

scheduler.replicas

Airflow 2.0 allows users to run multiple schedulers. This feature is only recommended for MySQL 8+ and PostgreSQL

1

scheduler.resources

Resources for scheduler pods.

{}

Examples:

resources:
  limits:
    cpu: 100m
    memory: 128Mi
  requests:
    cpu: 100m
    memory: 128Mi

scheduler.safeToEvict

This setting tells Kubernetes that its ok to evict when it wants to scale a node down.

True

scheduler.serviceAccount.annotations

Annotations to add to the scheduler Kubernetes ServiceAccount.

{}

scheduler.serviceAccount.create

Specifies whether a ServiceAccount should be created.

True

scheduler.serviceAccount.name

The name of the ServiceAccount to use. If not set and create is true, a name is generated using the release name.

~

scheduler.tolerations

Specify Tolerations for scheduler pods.

[]

Webserver

Parameter

Description

Default

webserver.affinity

Specify scheduling constraints for webserver pods.

{}

webserver.allowPodLogReading

Allow webserver to read k8s pod logs. Useful when you don’t have an external log store.

True

webserver.defaultUser.email

Default user email address.

admin@example.com

webserver.defaultUser.firstName

Default user firstname.

admin

webserver.defaultUser.lastName

Default user lastname.

user

webserver.defaultUser.password

Default user password.

admin

webserver.defaultUser.role

Default user role.

Admin

webserver.defaultUser.username

Default user username.

admin

webserver.extraContainers

Launch additional containers into webserver.

[]

webserver.extraNetworkPolicies

Additional NetworkPolicies as needed.

[]

webserver.extraVolumeMounts

Mount additional volumes into webserver.

[]

webserver.extraVolumes

Mount additional volumes into webserver.

[]

webserver.livenessProbe.failureThreshold

Webserver Liveness probe failure threshold.

20

webserver.livenessProbe.initialDelaySeconds

Webserver Liveness probe initial delay.

15

webserver.livenessProbe.periodSeconds

Webserver Liveness probe period seconds.

5

webserver.livenessProbe.timeoutSeconds

Webserver Liveness probe timeout seconds.

30

webserver.nodeSelector

Select certain nodes for webserver pods.

{}

webserver.readinessProbe.failureThreshold

Webserver Readiness probe failure threshold.

20

webserver.readinessProbe.initialDelaySeconds

Webserver Readiness probe initial delay.

15

webserver.readinessProbe.periodSeconds

Webserver Readiness probe period seconds.

5

webserver.readinessProbe.timeoutSeconds

Webserver Readiness probe timeout seconds.

30

webserver.replicas

How many Airflow webserver replicas should run.

1

webserver.resources

Resources for webserver pods.

{}

Examples:

resources:
  limits:
    cpu: 100m
    memory: 128Mi
  requests:
    cpu: 100m
    memory: 128Mi

webserver.service.annotations

Annotations for the webserver Service.

{}

webserver.service.type

Webserver Service type.

ClusterIP

webserver.serviceAccount.annotations

Annotations to add to the webserver Kubernetes ServiceAccount.

{}

webserver.serviceAccount.create

Specifies whether a ServiceAccount should be created.

True

webserver.serviceAccount.name

The name of the ServiceAccount to use. If not set and create is true, a name is generated using the release name.

~

webserver.strategy

Specifies the strategy used to replace old Pods by new ones.

~

webserver.tolerations

Specify Tolerations for webserver pods.

[]

Workers

Parameter

Description

Default

workers.affinity

Specify scheduling constraints for worker pods.

{}

workers.extraContainers

Launch additional containers into workers.

[]

workers.extraVolumeMounts

Mount additional volumes into workers.

[]

workers.extraVolumes

Mount additional volumes into workers.

[]

workers.hostAliases

Specify HostAliases for workers.

[]

Examples:

hostAliases:
- hostnames:
  - test.hostname.one
  ip: 127.0.0.2
hostAliases:
- hostnames:
  - test.hostname.two
  ip: 127.0.0.3

workers.keda.cooldownPeriod

How many seconds KEDA will wait before scaling to zero.

30

workers.keda.enabled

Allow KEDA autoscaling. Persistence.enabled must be set to false to use KEDA.

False

workers.keda.maxReplicaCount

Maximum number of workers created by KEDA.

10

workers.keda.namespaceLabels

Labels used in matchLabels for namespace in the PgBouncer NetworkPolicy.

{}

workers.keda.pollingInterval

How often KEDA polls the airflow DB to report new scale requests to the HPA.

5

workers.kerberosSidecar.enabled

Enable Kerberos sidecar for the worker.

False

workers.kerberosSidecar.resources

Resources on workers kerberos sidecar

{}

Examples:

resources:
  limits:
    cpu: 100m
    memory: 128Mi
  requests:
    cpu: 100m
    memory: 128Mi

workers.nodeSelector

Select certain nodes for worker pods.

{}

workers.persistence.enabled

Enable persistent volumes.

True

workers.persistence.fixPermissions

Execute init container to chown log directory. This is currently only needed in kind, due to usage of local-path provisioner.

False

workers.persistence.size

Volume size for worker StatefulSet.

100Gi

workers.persistence.storageClassName

If using a custom StorageClass, pass name ref to all StatefulSets here.

~

workers.replicas

Number of Airflow Celery workers in StatefulSet.

1

workers.resources

Resources on workers

{}

Examples:

resources:
  limits:
    cpu: 100m
    memory: 128Mi
  requests:
    cpu: 100m
    memory: 128Mi

workers.safeToEvict

This setting tells Kubernetes that it’s ok to evict when it wants to scale a node down.

True

workers.serviceAccount.annotations

Annotations to add to the worker Kubernetes ServiceAccount.

{}

workers.serviceAccount.create

Specifies whether a ServiceAccount should be created.

True

workers.serviceAccount.name

The name of the ServiceAccount to use. If not set and create is true, a name is generated using the release name.

~

workers.strategy

Specifies the strategy used to replace old Pods by new ones when deployed as a Deployment.

{'rollingUpdate': {'maxSurge': '100%', 'maxUnavailable': '50%'}}

workers.terminationGracePeriodSeconds

Grace period for tasks to finish after SIGTERM is sent from Kubernetes.

600

workers.tolerations

Specify Tolerations for worker pods.

[]

workers.updateStrategy

Specifies the strategy used to replace old Pods by new ones when deployed as a StatefulSet.

~

Flower

Parameter

Description

Default

flower.affinity

Specify scheduling constraints for Flower pods.

{}

flower.enabled

Enable Flower.

True

flower.extraNetworkPolicies

Additional NetworkPolicies as needed.

[]

flower.nodeSelector

Select certain nodes for Flower pods.

{}

flower.password

Password use to access Flower.

~

flower.resources

Resources for Flower pods.

{}

Examples:

resources:
  limits:
    cpu: 100m
    memory: 128Mi
  requests:
    cpu: 100m
    memory: 128Mi

flower.secretName

A secret containing the user and password pair.

~

flower.service.type

Flower Service type.

ClusterIP

flower.serviceAccount.annotations

Annotations to add to the worker Kubernetes ServiceAccount.

{}

flower.serviceAccount.create

Specifies whether a ServiceAccount should be created.

True

flower.serviceAccount.name

The name of the ServiceAccount to use. If not set and create is true, a name is generated using the release name.

~

flower.tolerations

Specify Tolerations for Flower pods.

[]

flower.username

Username use to access Flower.

~

Redis

Parameter

Description

Default

data.brokerUrl

Direct url to the redis broker (when using an external redis instance).

~

data.brokerUrlSecretName

Redis broker URL secret.

~

redis.affinity

Specify scheduling constraints for Redis pods.

{}

redis.enabled

Enable the Redis provisioned by the chart (you can also use an external Redis instance with data.brokerUrl or data.brokerUrlSecretName).

True

redis.nodeSelector

Select certain nodes for Redis pods.

{}

redis.password

If password is set, create secret with it, else generate a new one on install.

~

redis.passwordSecretName

Redis password secret.

~

redis.persistence.enabled

Enable persistent volumes.

True

redis.persistence.size

Volume size for Redis StatefulSet.

1Gi

redis.persistence.storageClassName

If using a custom StorageClass, pass name ref to all StatefulSets here.

~

redis.resources

Resources for the Redis pods

{}

Examples:

resources:
  limits:
    cpu: 100m
    memory: 128Mi
  requests:
    cpu: 100m
    memory: 128Mi

redis.safeToEvict

This setting tells Kubernetes that its ok to evict when it wants to scale a node down.

True

redis.serviceAccount.annotations

Annotations to add to the worker Kubernetes ServiceAccount.

{}

redis.serviceAccount.create

Specifies whether a ServiceAccount should be created.

True

redis.serviceAccount.name

The name of the ServiceAccount to use. If not set and create is true, a name is generated using the release name.

~

redis.terminationGracePeriodSeconds

Grace period for Redis to exit after SIGTERM is sent from Kubernetes.

600

redis.tolerations

Specify Tolerations for Redis pods.

[]

Statsd

Parameter

Description

Default

statsd.affinity

Specify scheduling constraints for StatsD pods.

{}

statsd.enabled

Enable StatsD.

True

statsd.extraMappings

Additional mappings for StatsD exporter.

[]

statsd.extraNetworkPolicies

Additional NetworkPolicies as needed.

[]

statsd.nodeSelector

Select certain nodes for StatsD pods.

{}

statsd.resources

Resources for StatsD pods.

{}

Examples:

resources:
  limits:
    cpu: 100m
    memory: 128Mi
  requests:
    cpu: 100m
    memory: 128Mi

statsd.service.extraAnnotations

Extra annotations for the StatsD Service.

{}

statsd.serviceAccount.annotations

Annotations to add to the StatsD Kubernetes ServiceAccount.

{}

statsd.serviceAccount.create

Specifies whether a ServiceAccount should be created.

True

statsd.serviceAccount.name

The name of the ServiceAccount to use. If not set and create is true, a name is generated using the release name.

~

statsd.tolerations

Specify Tolerations for StatsD pods.

[]

statsd.uid

StatsD run as user parameter.

65534

Jobs

Parameter

Description

Default

cleanup.affinity

Specify scheduling constraints for cleanup pods.

{}

cleanup.enabled

Enable cleanup.

False

cleanup.nodeSelector

Select certain nodes for cleanup pods.

{}

cleanup.schedule

Cleanup schedule.

*/15 * * * *

cleanup.serviceAccount.annotations

Annotations to add to the cleanup CronJob Kubernetes ServiceAccount.

{}

cleanup.serviceAccount.create

Specifies whether a ServiceAccount should be created.

True

cleanup.serviceAccount.name

The name of the ServiceAccount to use. If not set and create is true, a name is generated using the release name.

~

cleanup.tolerations

Specify Tolerations for cleanup pods.

[]

createUserJob.serviceAccount.annotations

Annotations to add to the create user job Kubernetes ServiceAccount.

{}

createUserJob.serviceAccount.create

Specifies whether a ServiceAccount should be created.

True

createUserJob.serviceAccount.name

The name of the ServiceAccount to use. If not set and create is true, a name is generated using the release name.

~

migrateDatabaseJob.serviceAccount.annotations

Annotations to add to the migrate database job Kubernetes ServiceAccount.

{}

migrateDatabaseJob.serviceAccount.create

Specifies whether a ServiceAccount should be created.

True

migrateDatabaseJob.serviceAccount.name

The name of the ServiceAccount to use. If not set and create is true, a name is generated using the release name.

~

Kubernetes

Parameter

Description

Default

affinity

Specify scheduling constraints for all pods.

{}

airflowConfigAnnotations

Extra annotations to apply to the main Airflow configmap.

{}

airflowPodAnnotations

Extra annotations to apply to all Airflow pods.

{}

extraConfigMaps

Extra ConfigMaps that will be managed by the chart.

{}

Examples:

extraConfigMaps:
  '{{ .Release.Name }}-airflow-variables':
    data: |-
      AIRFLOW_VAR_HELLO_MESSAGE: 'Hi!'
      AIRFLOW_VAR_KUBERNETES_NAMESPACE: '{{ .Release.Namespace }}'

extraSecrets

Extra secrets that will be managed by the chart.

{}

Examples:

extraSecrets:
  '{{ .Release.Name }}-airflow-connections':
    data: |-
      AIRFLOW_CONN_GCP: 'base64_encoded_gcp_conn_string'
      AIRFLOW_CONN_AWS: 'base64_encoded_aws_conn_string'
    stringData: 'AIRFLOW_CONN_OTHER: ''other_conn'''

labels

Add common labels to all objects and pods defined in this chart.

{}

limits

Define default/max/min values for pods and containers in namespace.

[]

networkPolicies.enabled

Enabled network policies.

False

nodeSelector

Select certain nodes for all pods.

{}

quotas

Define any ResourceQuotas for namespace.

{}

rbac.create

Specifies whether RBAC resources should be created.

True

registry.connection

Registry connection configuration.

{}

Examples:

connection:
  email: '...'
  host: '...'
  pass: '...'
  user: '...'

registry.secretName

Registry connection string secret.

~

tolerations

Specify Tolerations for all pods.

[]

Ingress

Parameter

Description

Default

ingress.enabled

Enable ingress resource.

False

ingress.flower.annotations

Annotations for the flower Ingress.

{}

ingress.flower.host

The hostname for the flower Ingress.

""

ingress.flower.path

The path for the flower Ingress.

""

ingress.flower.precedingPaths

HTTP paths to add to the flower Ingress before the default path.

[]

ingress.flower.succeedingPaths

HTTP paths to add to the flower Ingress after the default path.

[]

ingress.flower.tls.enabled

Enable TLS termination for the flower Ingress.

False

ingress.flower.tls.secretName

The name of a pre-created Secret containing a TLS private key and certificate.

""

ingress.web.annotations

Annotations for the web Ingress.

{}

ingress.web.host

The hostname for the web Ingress.

""

ingress.web.path

The path for the web Ingress.

""

ingress.web.precedingPaths

HTTP paths to add to the web Ingress before the default path.

[]

ingress.web.succeedingPaths

HTTP paths to add to the web Ingress after the default path.

[]

ingress.web.tls.enabled

Enable TLS termination for the web Ingress.

False

ingress.web.tls.secretName

The name of a pre-created Secret containing a TLS private key and certificate.

""

Kerberos

Parameter

Description

Default

kerberos.ccacheFileName

Name for kerberos credentials cache file.

cache

kerberos.ccacheMountPath

Path to mount shared volume for kerberos credentials cache.

/var/kerberos-ccache

kerberos.config

Contents of krb5.conf.

See values.yaml

kerberos.configPath

Path to mount krb5.conf kerberos configuration file.

/etc/krb5.conf

kerberos.enabled

Enable kerberos.

False

kerberos.keytabPath

Path to mount the keytab for refreshing credentials in the kerberos sidecar.

/etc/airflow.keytab

kerberos.principal

Principal to use when refreshing kerberos credentials.

airflow@FOO.COM

kerberos.reinitFrequency

How often (in seconds) airflow kerberos will reinitialize the credentials cache.

3600

Specify each parameter using the --set key=value[,key=value] argument to helm install. For example,

helm install my-release apache-airflow/airflow \
  --set executor=CeleryExecutor \
  --set enablePodLaunching=false .

Was this entry helpful?