$ show astronomer/airflow-chart
This is an Astronomer-maintained Helm chart for deploying Apache Airflow on Kubernetes with custom extensions like git-sync relay, dag-deploy server, auth/logging sidecars, and pgbouncer. It wraps the upstream Apache Airflow chart as a subchart and adds robust security hardening (Pod Security Standards restricted), ingress support, and OpenShift compatibility. The repository includes an extensive test suite that validates rendered templates against Kubernetes API schemas across multiple versions (1.31-1.35) and runs functional tests on kind clusters. The chart is well-structured with modular Helm templates, helper functions for common patterns (private CA trust, sidecar injection, service account naming), and comprehensive CI/CD pipelines. It is actively maintained and used by Astronomer to distribute Airflow via their Helm repository.
The LLM identified 2 files worth highlighting for reuse:
Implements a self-contained, reusable pattern for mounting custom CA certificates into containers via four named templates: customCaVolumes, customCaInitContainer, customCaVolumeMounts, and customCaEnv. This pattern handles multiple CA certificates, an init container to update the system trust store, and appropriate volume mounts. It can be extracted and reused in any Helm chart that needs to inject private CA bundles into containers without modification.
Provides the central test harness render_chart() that runs helm template with configurable values, kube versions, and --show-only filters, then validates rendered output against cached Kubernetes JSON schemas. The function is keyword-argument driven, supports optional schema validation, and can be separated into a standalone testing tool for any Helm chart project that needs to validate generated manifests against specific Kubernetes API versions.