Skip to content

Apache Airflow

vhelm-chart/1.22.0 Breaking

This release includes 2 breaking changes for platform teams planning a safe upgrade.

✓ No known CVEs patched
Read the diff → Tool health → What is this tool? →

✓ No known CVEs patched in this version

Topics

airflow apache apache-airflow automation dag data-engineering
+14 more
data-integration data-orchestrator data-pipelines data-science elt etl machine-learning mlops orchestration python scheduler workflow workflow-engine workflow-orchestration

Affected surfaces

auth rbac breaking_upgrade

ReleasePort's take

Light signal
editorial:auto 1mo

The Helm chart for Apache Airflow has been updated to version 1.22.0, raising the minimum required Helm client to 3.19.0 and introducing several new features and fixes.

Why it matters: Minimum Helm version is now 3.19.0; deployments using older Helm clients will fail to render or upgrade the chart.

Summary

AI summary

Updates Bug Fixes, New Features, and Doc only changes across a mixed release.

Changes in this release

Feature Low

Adds optional OpenTelemetry (OTel) service to Airflow Helm Chart

Adds optional OpenTelemetry (OTel) service to Airflow Helm Chart

Source: llm_adapter@2026-06-14

Confidence: high

Feature Low

Adds `serviceAccountTokenVolume` to cleanup cron job

Adds `serviceAccountTokenVolume` to cleanup cron job

Source: llm_adapter@2026-06-14

Confidence: high

Feature Low

Adds `requirePersistence` option to worker logGroomerSidecar

Adds `requirePersistence` option to worker logGroomerSidecar

Source: llm_adapter@2026-06-14

Confidence: high

Feature Low

Adds checksum for API server config in deployment

Adds checksum for API server config in deployment

Source: granite4.1:30b@2026-06-14-audit

Confidence: low

Dependency Medium

Minimum Helm version updated to 3.19.0

Minimum Helm version updated to 3.19.0

Source: llm_adapter@2026-06-14

Confidence: high

Dependency Medium

Default Airflow image updated to 3.2.2

Default Airflow image updated to 3.2.2

Source: llm_adapter@2026-06-14

Confidence: high

Bugfix Medium

Fixes Helm chart executor label to support executor aliases

Fixes Helm chart executor label to support executor aliases

Source: llm_adapter@2026-06-14

Confidence: high

Bugfix Medium

Fixes triggerer KEDA database connection rendering

Fixes triggerer KEDA database connection rendering

Source: llm_adapter@2026-06-14

Confidence: high

Bugfix Medium

Fixes Celery worker liveness probe hostname lookup

Fixes Celery worker liveness probe hostname lookup

Source: llm_adapter@2026-06-14

Confidence: high

Bugfix Medium

Fixes Go template error comparing slice to nil using `eq`

Fixes Go template error comparing slice to nil using `eq`

Source: llm_adapter@2026-06-14

Confidence: high

Bugfix Medium

Fixes Kubernetes worker service account values

Fixes Kubernetes worker service account values

Source: llm_adapter@2026-06-14

Confidence: high

Bugfix Low

Fixes launcher RBAC for executor class paths

Fixes launcher RBAC for executor class paths

Source: granite4.1:30b@2026-06-14-audit

Confidence: low

Bugfix Low

Fixes task log access with NetworkPolicies for Airflow 2 and 3

Fixes task log access with NetworkPolicies for Airflow 2 and 3

Source: granite4.1:30b@2026-06-14-audit

Confidence: low

Bugfix Low

Adds missing `tpl` rendering for ServiceAccount annotations

Adds missing `tpl` rendering for ServiceAccount annotations

Source: granite4.1:30b@2026-06-14-audit

Confidence: low

Bugfix Low

Fixes go-template `if` statements for log groomer retention values

Fixes go-template `if` statements for log groomer retention values

Source: granite4.1:30b@2026-06-14-audit

Confidence: low

Bugfix Low

Fixes database cleanup lifecycle hooks

Fixes database cleanup lifecycle hooks

Source: granite4.1:30b@2026-06-14-audit

Confidence: low

Bugfix Low

Fixes cleanup pod lifecycle hooks not being applied

Fixes cleanup pod lifecycle hooks not being applied

Source: granite4.1:30b@2026-06-14-audit

Confidence: low

Bugfix Low

Fixes deprecation warning

Fixes deprecation warning

Source: granite4.1:30b@2026-06-14-audit

Confidence: low

Full changelog

Significant Changes

Minimum Helm version was updated to 3.19.0 (#66970)

Default Airflow image is updated to 3.2.2 (#67681)

The default Airflow image that is used with the Chart is now 3.2.2, previously it was 3.2.1.

Added support for configuring enableServiceLinks (#67447)

The default will become false in Chart 2.0. If you rely on these environment variables,
explicitly set enableServiceLinks: true, or migrate your code to use DNS-based service lookups.

New Features

  • Add optional OTel service to the Airflow Helm Chart (#64902)
  • Add serviceAccountTokenVolume to cleanup cron (#67446)
  • Add requirePersistence option to worker logGroomerSidecar (#65884)

Improvements

  • Add checksum for api-server config in API server deployment (#66468)

Bug Fixes

  • Fix Helm chart executor label to support executor aliases (#67762)
  • Fix triggerer KEDA database connection rendering (#67538)
  • Fix Celery worker liveness probe hostname lookup (#67471)
  • Fix Go template error comparing slice to nil using eq (#64032)
  • Fix Kubernetes worker service account values (#66598)
  • Add binding for workers.kubernetes and condition workers ServiceAccount (#66730)
  • Fix launcher RBAC for executor class paths (#66208)
  • Fix task log access with NetworkPolicies for Airflow 2 and 3 (#65754)
  • Add missing tpl rendering for ServiceAccount annotations (#66095)
  • Fix go-template if statements for log groomer retention values (#66012)
  • Fix database cleanup lifecycle hooks (#65881)
  • Fix cleanup pod lifecycle hooks not being applied (#65764)
  • Fix deprecation warning (#66238)

Doc only changes

  • Expand Helm Chart upgrade tasks in the Airflow 3 migration guide (#66118)

Misc

  • Change job/pod role bindings rendering and refactor related tests (#66626)
  • Standardize on Dag capitalization in chart wording (#66114)

Breaking Changes

  • Minimum Helm version updated to 3.19.0
  • `enableServiceLinks` default will become false in Chart 2.0

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track Apache Airflow

Get notified when new releases ship.

Sign up free

About Apache Airflow

Platform to programmatically author, schedule, and monitor workflows.

All releases →

Related context

Earlier breaking changes

  • v3.2.2 Custom deadline reference classes must be registered via ``deadline_references`` attribute on ``AirflowPlugin``.
  • v3.2.2 ``[core] allowed_deserialization_classes_regexp`` now requires full-string matches.
  • v3.2.2 REST API query parameters switch from full-match to prefix-based matching.

Beta — feedback welcome: [email protected]