fix: set appProtocol on Service ports (for Istio) (#854)

Signed-off-by: Mathew Wicks <5735406+thesuperzapper@users.noreply.github.com>
airflow-helm · May 1, 2024 · b846fcd · b846fcd
1 parent d645492
commit b846fcd
Show file tree

Hide file tree

Showing 5 changed files with 22 additions and 1 deletion.
diff --git a/charts/airflow/templates/_helpers/common.tpl b/charts/airflow/templates/_helpers/common.tpl
@@ -62,7 +62,8 @@ true
 {{- end -}}
 
 {{/*
-The scheme (HTTP, HTTPS) used by the webserver
+The scheme (HTTP, HTTPS) used by the webserver.
+NOTE: this is used in the liveness/readiness probes of the webserver
 */}}
 {{- define "airflow.web.scheme" -}}
 {{- if and (.Values.airflow.config.AIRFLOW__WEBSERVER__WEB_SERVER_SSL_CERT) (.Values.airflow.config.AIRFLOW__WEBSERVER__WEB_SERVER_SSL_KEY) -}}
@@ -72,6 +73,18 @@ HTTP
 {{- end -}}
 {{- end -}}
 
+{{/*
+The app protocol used by the webserver.
+NOTE: this sets the `appProtocol` of the Service port (only important for Istio users)
+*/}}
+{{- define "airflow.web.appProtocol" -}}
+{{- if and (.Values.airflow.config.AIRFLOW__WEBSERVER__WEB_SERVER_SSL_CERT) (.Values.airflow.config.AIRFLOW__WEBSERVER__WEB_SERVER_SSL_KEY) -}}
+https
+{{- else -}}
+http
+{{- end -}}
+{{- end -}}
+
 {{/*
 The path containing DAG files
 */}}

diff --git a/charts/airflow/templates/flower/flower-service.yaml b/charts/airflow/templates/flower/flower-service.yaml
@@ -21,6 +21,8 @@ spec:
     release: {{ .Release.Name }}
   ports:
     - name: flower
+      ## NOTE: flower always uses http (only important for Istio users)
+      appProtocol: http
       protocol: TCP
       port: {{ .Values.flower.service.externalPort }}
       {{- if and (eq .Values.flower.service.type "NodePort") (.Values.flower.service.nodePort.http) }}

diff --git a/charts/airflow/templates/pgbouncer/pgbouncer-service.yaml b/charts/airflow/templates/pgbouncer/pgbouncer-service.yaml
@@ -17,6 +17,8 @@ spec:
     release: {{ .Release.Name }}
   ports:
     - name: pgbouncer
+      ## NOTE: pgbouncer should be treated as opaque TCP (only important for Istio users)
+      appProtocol: tcp
       protocol: TCP
       port: 6432
 {{- end }}
diff --git a/charts/airflow/templates/webserver/webserver-service.yaml b/charts/airflow/templates/webserver/webserver-service.yaml
@@ -25,6 +25,7 @@ spec:
   {{- end }}
   ports:
     - name: web
+      appProtocol: {{ include "airflow.web.appProtocol" . | quote }}
       protocol: TCP
       port: {{ .Values.web.service.externalPort | default 8080 }}
       {{- if and (eq .Values.web.service.type "NodePort") (.Values.web.service.nodePort.http) }}

diff --git a/charts/airflow/templates/worker/worker-service.yaml b/charts/airflow/templates/worker/worker-service.yaml
@@ -13,6 +13,9 @@ metadata:
 spec:
   ports:
     - name: worker
+      ## NOTE: the worker logs port is always http (only important for Istio users)
+      ##       https://github.com/apache/airflow/blob/2.9.0/airflow/utils/log/file_task_handler.py#L415
+      appProtocol: http
       protocol: TCP
       port: 8793
   clusterIP: None