207 lines
8.1 KiB
Plaintext
207 lines
8.1 KiB
Plaintext
{{/*
|
|
Licensed to the Apache Software Foundation (ASF) under one
|
|
or more contributor license agreements. See the NOTICE file
|
|
distributed with this work for additional information
|
|
regarding copyright ownership. The ASF licenses this file
|
|
to you under the Apache License, Version 2.0 (the
|
|
"License"); you may not use this file except in compliance
|
|
with the License. You may obtain a copy of the License at
|
|
|
|
http://www.apache.org/licenses/LICENSE-2.0
|
|
|
|
Unless required by applicable law or agreed to in writing,
|
|
software distributed under the License is distributed on an
|
|
"AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
|
|
KIND, either express or implied. See the License for the
|
|
specific language governing permissions and limitations
|
|
under the License.
|
|
*/}}
|
|
|
|
|
|
Thank you for installing Apache {{ title .Chart.Name }} {{ .Values.airflowVersion }}!
|
|
|
|
Your release is named {{ .Release.Name }}.
|
|
|
|
{{- if or .Values.ingress.web.enabled .Values.ingress.flower.enabled .Values.ingress.enabled }}
|
|
You can now access your service(s) by following defined Ingress urls:
|
|
|
|
{{- if .Values.ingress.web.host }}
|
|
|
|
DEPRECATION WARNING:
|
|
`ingress.web.host` has been renamed to `ingress.web.hosts` and is now an array.
|
|
Please change your values as support for the old name will be dropped in a future release.
|
|
|
|
{{- end }}
|
|
|
|
{{- if .Values.ingress.web.tls }}
|
|
|
|
DEPRECATION WARNING:
|
|
`ingress.web.tls` has been renamed to `ingress.web.hosts[*].tls` and can be set per host.
|
|
Please change your values as support for the old name will be dropped in a future release.
|
|
|
|
{{- end }}
|
|
|
|
{{- if .Values.ingress.flower.host }}
|
|
|
|
DEPRECATION WARNING:
|
|
`ingress.flower.host` has been renamed to `ingress.flower.hosts` and is now an array.
|
|
Please change your values as support for the old name will be dropped in a future release.
|
|
|
|
{{- end }}
|
|
|
|
|
|
{{- if .Values.ingress.flower.tls }}
|
|
|
|
DEPRECATION WARNING:
|
|
`ingress.flower.tls` has been renamed to `ingress.flower.hosts[*].tls` and can be set per host.
|
|
Please change your values as support for the old name will be dropped in a future release.
|
|
|
|
{{- end }}
|
|
|
|
{{- if .Values.ingress.enabled }}
|
|
|
|
DEPRECATION WARNING:
|
|
`ingress.enabled` has been deprecated. There are now separate flags to control the webserver and
|
|
flower individually, ``ingress.web.enabled`` and ``ingress.flower.enabled``.
|
|
Please change your values as support for the old name will be dropped in a future release.
|
|
|
|
{{- end }}
|
|
|
|
{{- if or .Values.ingress.web.enabled .Values.ingress.enabled }}
|
|
Airflow Webserver:
|
|
{{- range .Values.ingress.web.hosts | default (list .Values.ingress.web.host) }}
|
|
{{- $tlsEnabled := $.Values.ingress.web.tls.enabled -}}
|
|
{{- $hostname := $.Values.ingress.web.host -}}
|
|
{{- if . | kindIs "string" | not }}
|
|
{{- if .tls }}
|
|
{{- $tlsEnabled = .tls.enabled -}}
|
|
{{- $hostname = .name -}}
|
|
{{- end }}
|
|
{{- end }}
|
|
http{{ if $tlsEnabled }}s{{ end }}://{{ $hostname }}{{ $.Values.ingress.web.path }}/
|
|
{{- end }}
|
|
{{- end }}
|
|
{{- if and (or .Values.ingress.flower.enabled .Values.ingress.enabled) (or (eq .Values.executor "CeleryExecutor") (eq .Values.executor "CeleryKubernetesExecutor")) }}
|
|
Flower dashboard:
|
|
{{- range .Values.ingress.flower.hosts | default (list .Values.ingress.flower.host) }}
|
|
{{- $tlsEnabled := $.Values.ingress.flower.tls.enabled -}}
|
|
{{- $hostname := $.Values.ingress.flower.host -}}
|
|
{{- if . | kindIs "string" | not }}
|
|
{{- if .tls }}
|
|
{{- $tlsEnabled = .tls.enabled -}}
|
|
{{- $hostname = .name -}}
|
|
{{- end }}
|
|
{{- end }}
|
|
http{{ if $tlsEnabled }}s{{ end }}://{{ $hostname }}{{ $.Values.ingress.flower.path }}/
|
|
{{- end }}
|
|
{{- end }}
|
|
{{- else }}
|
|
You can now access your dashboard(s) by executing the following command(s) and visiting the corresponding port at localhost in your browser:
|
|
|
|
Airflow Webserver: kubectl port-forward svc/{{ include "airflow.fullname" . }}-webserver {{ .Values.ports.airflowUI }}:{{ .Values.ports.airflowUI }} --namespace {{ .Release.Namespace }}
|
|
|
|
{{- if .Values.flower.enabled }}
|
|
{{- if or (eq .Values.executor "CeleryExecutor") (eq .Values.executor "CeleryKubernetesExecutor")}}
|
|
Flower dashboard: kubectl port-forward svc/{{ include "airflow.fullname" . }}-flower {{ .Values.ports.flowerUI }}:{{ .Values.ports.flowerUI }} --namespace {{ .Release.Namespace }}
|
|
|
|
{{- end }}
|
|
{{- end }}
|
|
{{- end }}
|
|
|
|
|
|
{{- if .Values.webserver.defaultUser.enabled}}
|
|
Default Webserver (Airflow UI) Login credentials:
|
|
username: {{ .Values.webserver.defaultUser.username }}
|
|
password: {{ .Values.webserver.defaultUser.password }}
|
|
{{- end }}
|
|
|
|
{{- if .Values.postgresql.enabled }}
|
|
Default Postgres connection credentials:
|
|
username: {{ .Values.data.metadataConnection.user }}
|
|
password: {{ .Values.data.metadataConnection.pass }}
|
|
port: {{ .Values.data.metadataConnection.port }}
|
|
|
|
{{- end }}
|
|
|
|
{{- if not .Values.fernetKeySecretName }}
|
|
|
|
You can get Fernet Key value by running the following:
|
|
|
|
echo Fernet Key: $(kubectl get secret --namespace {{ .Release.Namespace }} {{ .Release.Name }}-fernet-key -o jsonpath="{.data.fernet-key}" | base64 --decode)
|
|
|
|
{{- end }}
|
|
|
|
{{- if or (eq .Values.executor "KubernetesExecutor") (eq .Values.executor "CeleryKubernetesExecutor") }}
|
|
{{- if and (not .Values.logs.persistence.enabled) (eq (lower (tpl .Values.config.logging.remote_logging .)) "false") }}
|
|
|
|
WARNING:
|
|
Kubernetes workers task logs may not persist unless you configure log persistence or remote logging!
|
|
Logging options can be found at: https://airflow.apache.org/docs/helm-chart/stable/manage-logs.html
|
|
(This warning can be ignored if logging is configured with environment variables or secrets backend)
|
|
|
|
{{- end }}
|
|
{{- end }}
|
|
|
|
{{- if and .Values.dags.gitSync.enabled .Values.dags.gitSync.sshKeySecret (not .Values.dags.gitSync.knownHosts)}}
|
|
|
|
#####################################################
|
|
# WARNING: You should set dags.gitSync.knownHosts #
|
|
#####################################################
|
|
|
|
You are using ssh authentication for your gitsync repo, however you currently have SSH known_hosts verification disabled,
|
|
making you susceptible to man-in-the-middle attacks!
|
|
|
|
Information on how to set knownHosts can be found here:
|
|
https://airflow.apache.org/docs/helm-chart/stable/production-guide.html#knownhosts
|
|
|
|
{{- end }}
|
|
|
|
{{- if .Values.flower.extraNetworkPolicies }}
|
|
|
|
DEPRECATION WARNING:
|
|
`flower.extraNetworkPolicies` has been renamed to `flower.networkPolicy.peers`.
|
|
Please change your values as support for the old name will be dropped in a future release.
|
|
|
|
{{- end }}
|
|
|
|
|
|
{{- if .Values.webserver.extraNetworkPolicies }}
|
|
|
|
DEPRECATION WARNING:
|
|
`webserver.extraNetworkPolicies` has been renamed to `webserver.networkPolicy.peers`.
|
|
Please change your values as support for the old name will be dropped in a future release.
|
|
|
|
{{- end }}
|
|
|
|
{{- if not (or .Values.webserverSecretKey .Values.webserverSecretKeySecretName) }}
|
|
|
|
{{- if .Values.securityContext }}
|
|
|
|
DEPRECATION WARNING:
|
|
`securityContext` has been renamed to `securityContexts`, to be enabled on container and pod level.
|
|
Please change your values as support for the old name will be dropped in a future release.
|
|
|
|
{{- end }}
|
|
|
|
###########################################################
|
|
# WARNING: You should set a static webserver secret key #
|
|
###########################################################
|
|
|
|
You are using a dynamically generated webserver secret key, which can lead to
|
|
unnecessary restarts of your Airflow components.
|
|
|
|
Information on how to set a static webserver secret key can be found here:
|
|
https://airflow.apache.org/docs/helm-chart/stable/production-guide.html#webserver-secret-key
|
|
|
|
{{- end }}
|
|
|
|
{{- if or .Values.postgresql.postgresqlUsername .Values.postgresql.postgresqlPassword }}
|
|
|
|
{{ fail "postgresql.postgresqlUsername and postgresql.postgresqlPassword are no longer supported. If you wish to use the 'postgres' user, set its password with postgresql.auth.postgresPassword. If you wish to create a different user, do so with postgresql.auth.username and postgresql.auth.password." }}
|
|
|
|
{{- end }}
|
|
|
|
{{- if ne .Values.executor (tpl .Values.config.core.executor $) }}
|
|
{{ fail "Please configure the executor with `executor`, not `config.core.executor`." }}
|
|
{{- end }}
|