Update Pod Templates, Values for JWT Timeout

Author: LiamF-FS

airflow/pod_templates/okd/heavy_task_template.yaml

@@ -86,6 +86,10 @@ spec:
           value: "/opt/airflow/email_templates/content/okd_content.html"
         - name: AIRFLOW__API__BASE_URL
           value: "http://bcwat.airflow.fspatial"
+        - name: AIRFLOW__EXECUTION_API__JWT_EXPIRATION_TIME
+          value: "21600"
+        - name: AIRFLOW__API_AUTH__JWT_LEEWAY
+          value: "60"
       resources:
         requests:
           memory: 4096Mi

airflow/pod_templates/okd/largest_task_template.yaml

@@ -86,6 +86,10 @@ spec:
           value: "/opt/airflow/email_templates/content/okd_content.html"
         - name: AIRFLOW__API__BASE_URL
           value: "http://bcwat.airflow.fspatial"
+        - name: AIRFLOW__EXECUTION_API__JWT_EXPIRATION_TIME
+          value: "21600"
+        - name: AIRFLOW__API_AUTH__JWT_LEEWAY
+          value: "60"
       resources:
         requests:
           memory: 5000Mi

airflow/pod_templates/okd/medium_task_template.yaml

@@ -86,6 +86,10 @@ spec:
           value: "/opt/airflow/email_templates/content/okd_content.html"
         - name: AIRFLOW__API__BASE_URL
           value: "http://bcwat.airflow.fspatial"
+        - name: AIRFLOW__EXECUTION_API__JWT_EXPIRATION_TIME
+          value: "21600"
+        - name: AIRFLOW__API_AUTH__JWT_LEEWAY
+          value: "60"
       resources:
         requests:
           memory: 2048Mi

airflow/pod_templates/okd/small_task_template.yaml

@@ -86,6 +86,10 @@ spec:
           value: "/opt/airflow/email_templates/content/okd_content.html"
         - name: AIRFLOW__API__BASE_URL
           value: "http://bcwat.airflow.fspatial"
+        - name: AIRFLOW__EXECUTION_API__JWT_EXPIRATION_TIME
+          value: "21600"
+        - name: AIRFLOW__API_AUTH__JWT_LEEWAY
+          value: "60"
       resources:
         requests:
           memory: 750Mi

airflow/pod_templates/okd/tiny_task_template.yaml

@@ -86,6 +86,10 @@ spec:
           value: "/opt/airflow/email_templates/content/okd_content.html"
         - name: AIRFLOW__API__BASE_URL
           value: "http://bcwat.airflow.fspatial"
+        - name: AIRFLOW__EXECUTION_API__JWT_EXPIRATION_TIME
+          value: "21600"
+        - name: AIRFLOW__API_AUTH__JWT_LEEWAY
+          value: "60"
       resources:
         requests:
           memory: 500Mi

charts/okd/airflow/values.yaml

@@ -68,6 +68,13 @@ logs:
     enabled: true
     storageClassName: airflow
 
+securityContexts:
+  pod:
+    runAsNonRoot: true
+  containers:
+    seccompProfile:
+      type: RuntimeDefault
+
 migrateDatabaseJob:
   useHelmHooks: false
   env:
@@ -98,6 +105,10 @@ apiServer:
       value: "False"
     - name: ENVIRONMENT
       value: OKD
+    - name: AIRFLOW__EXECUTION_API__JWT_EXPIRATION_TIME
+      value: "21600"
+    - name: AIRFLOW__API_AUTH__JWT_LEEWAY
+      value: "60"
   extraInitContainers:
     - name: bcwat-api-init
       image: "{{ .Values.migrations.image }}"
@@ -122,41 +133,39 @@ apiServer:
         requests:
           cpu: 50m
           memory: 75Mi
-  waitForMigrations:
-    enabled: true
-  securityContext:
-    runAsNonRoot: true
-    seccompProfile:
-      type: RuntimeDefault
 dagProcessor:
   env:
     - name: ENVIRONMENT
       value: OKD
+    - name: AIRFLOW__EXECUTION_API__JWT_EXPIRATION_TIME
+      value: "21600"
+    - name: AIRFLOW__API_AUTH__JWT_LEEWAY
+      value: "60"
 
 scheduler:
   env:
     - name: AIRFLOW__CORE__DAGS_ARE_PAUSED_AT_CREATION
       value: "False"
     - name: ENVIRONMENT
       value: OKD
+    - name: AIRFLOW__EXECUTION_API__JWT_EXPIRATION_TIME
+      value: "21600"
+    - name: AIRFLOW__API_AUTH__JWT_LEEWAY
+      value: "60"
   waitForMigrations:
     enabled: true
-  securityContext:
-    runAsNonRoot: true
-    seccompProfile:
-      type: RuntimeDefault
 
 triggerer:
   env:
     - name: AIRFLOW__CORE__DAGS_ARE_PAUSED_AT_CREATION
       value: "False"
     - name: ENVIRONMENT
       value: OKD
+    - name: AIRFLOW__EXECUTION_API__JWT_EXPIRATION_TIME
+      value: "21600"
+    - name: AIRFLOW__API_AUTH__JWT_LEEWAY
+      value: "60"
   persistence:
     enabled: false
   waitForMigrations:
     enabled: true
-  securityContext:
-    runAsNonRoot: true
-    seccompProfile:
-      type: RuntimeDefault