Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

what is the timeline for support to airflow 2.8 #814

Closed
3 of 4 tasks
yossisht9876 opened this issue Jan 2, 2024 · 6 comments
Closed
3 of 4 tasks

what is the timeline for support to airflow 2.8 #814

yossisht9876 opened this issue Jan 2, 2024 · 6 comments
Labels
kind/enhancement kind - new features or changes
Milestone

Comments

@yossisht9876
Copy link

yossisht9876 commented Jan 2, 2024

Checks

Motivation

hi
we wonder what is the timeline for support to airflow 2.8 ?
as for now we use airflow 2.7.3 python 3.9 and our security team discover that there is more then 290 vulnerabilities. Top risk: CVE-2019-8457 (CVSS:9.8, Buffer Overflow)

`There are a total of 292 vulnerabilities in apache/airflow@2.7.3-python3.9.

The severities of the CVEs are as follows:

Critical : 10

High : 64

Medium : 58

Low : 160

The following 92 dependencies have vulnerabilities: db5.3-util@5.3.28+dfsg1-0.8, libdb5.3@5.3.28+dfsg1-0.8, libpython3.9-minimal@3.9.2-1, libpython3.9-stdlib@3.9.2-1, python3.9@3.9.2-1, python3.9-minimal@3.9.2-1, zlib1g@1:1.2.11.dfsg-2+deb11u2, openssh-client@1:8.4p1-5+deb11u2, curl@7.74.0-1.3+deb11u10, libcurl4@7.74.0-1.3+deb11u10, bind9-host@1:9.16.44-1deb11u1, bind9-libs@1:9.16.44-1deb11u1, libperl5.32@5.32.1-4+deb11u2, perl@5.32.1-4+deb11u2, perl-base@5.32.1-4+deb11u2, perl-modules-5.32@5.32.1-4+deb11u2, e2fsprogs@1.46.2-2, libcom-err2@1.46.2-2, libext2fs2@1.46.2-2, libss2@1.46.2-2...+ 72 more`

and 80% of the vulnerabilities are fixed in 2.8 version

Implementation

No response

Are you willing & able to help?

  • I am able to submit a PR!
  • I can help test the feature!
@yossisht9876 yossisht9876 added the kind/enhancement kind - new features or changes label Jan 2, 2024
@Olaktal
Copy link

Olaktal commented Jan 4, 2024

+1 for a chart update to support Airflow 2.8 🙏

1 similar comment
@Jarzamendia
Copy link

+1 for a chart update to support Airflow 2.8 🙏

@vizeit
Copy link

vizeit commented Jan 29, 2024

+1 for airflow 2.8 support

@thesuperzapper
Copy link
Member

Hey everyone, I am also eager to "officially" support Airflow 2.8 on the chart!

There is a chance that no additional changes are required to use it with the version 8.8.0 of the chart, (in which case, we can just update the documentation to say that).

Has anyone encountered any problems so far when using the 2.8.X container images with version 8.8.0 of the chart?

If people are willing to test (preferably in a test environment, NOT production) and you find anything, please reply to this issue so we can see if there are any big problems.

@Olaktal @yossisht9876 @Jarzamendia @vizeit


Also, please be aware that (in my experience) upstream airflow takes a while to stabilize any new release version, so there might be non-chart related issues or regressions.

(This is why the chart doesn't use the latest airflow version by default).

@vizeit
Copy link

vizeit commented Jan 30, 2024

Hey everyone, I am also eager to "officially" support Airflow 2.8 on the chart!

There is a chance that no additional changes are required to use it with the version 8.8.0 of the chart, (in which case, we can just update the documentation to say that).

Has anyone encountered any problems so far when using the 2.8.X container images with version 8.8.0 of the chart?

If people are willing to test (preferably in a test environment, NOT production) and you find anything, please reply to this issue so we can see if there are any big problems.

@Olaktal @yossisht9876 @Jarzamendia @vizeit

Also, please be aware that (in my experience) upstream airflow takes a while to stabilize any new release version, so there might be non-chart related issues or regressions.

(This is why the chart doesn't use the latest airflow version by default).

I have installed 2.8.0 & 2.8.1 on multiple test environments(GKE clusters) using chart version 8.8.0 and have not noticed any issues so far

@thesuperzapper thesuperzapper added this to the airflow-8.9.0 milestone Apr 25, 2024
@thesuperzapper
Copy link
Member

Hey everyone, we have released version 8.9.0 of the Helm Chart with official support for Airflow 2.8 and 2.9!

WARNING: if you want to use airflow 2.9.0+ you MUST update to chart 8.9.0+ because there are problems we had to fix.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
kind/enhancement kind - new features or changes
Projects
None yet
Development

No branches or pull requests

5 participants