Skip to main content
Version: 0.23

Astronomer v0.23 Release Notes


This document includes all release notes for Astronomer Software v0.23.

If you're looking to upgrade to Astronomer v0.23 from Astronomer v0.16, refer to Upgrade to Astronomer v0.23. For instructions on how to upgrade to a patch version within the Astronomer v0.23 series, refer to Upgrade to a Patch Version of Astronomer Software.

We're committed to testing all Astronomer Software versions for scale, reliability and security on Amazon EKS, Google GKE and Azure AKS. If you have any questions or an issue to report, don't hesitate to reach out to us.

Note: The perceived version gap between Astronomer Software v0.16 and v0.23 is due to the nature of Astronomer's release schedule. To optimize for security and reliability, Astro releases are made available to Software users only after they've passed a dedicated testing process. Astronomer Software v0.23 includes all changes made available on Astro between v0.16 and v0.23, in addition to Software-only functionality.


Release date: December 11, 2021

Bug Fixes

  • Remediated CVE-2021-44228 related to Log4J by setting ES_JAVA_OPTS=-Dlog4j2.formatMsgNoLookups=true at runtime for all ElasticSearch containers
  • Enabled the use of legacy ingress versions so that users can upgrade to new versions of 0.23 while using Kubernetes 1.20+


Release Date: October 29, 2021

Bug Fixes

  • Fixed a security issue where an internal API endpoint could be accessed by an unauthorized user with a specific event input


Release date: September 13, 2021

Minor Improvements

  • When upgrading Astronomer, you can now specify astronomer.houston.upgradeDeployments.enabled=false in your Helm chart. This setting prevents Deployments from having their Airflow chart upgraded automatically during your platform upgrade. You can use this setting if you want your administrative team to manually upgrade Deployments from within your Houston pods.

Bug Fixes

  • Fixed an issue where, during the process of upgrading from v0.16 to v0.23, upgrading Deployments to a newer Airflow chart version would occasionally timeout.


Release Date: April 27, 2021

Support for Airflow 2.0.2

Astronomer Software v0.23 now offers full support for Airflow 2.0.2. Airflow 2.0.2 builds upon the success of Airflow 2.0.0 and 2.0.1 with more bug fixes and performance improvements, including:

  • Gracefully handling missing start_date and end_date for DagRuns (Source)
  • Faster default role syncing during Webserver start (Source)
  • Increased Webserver start-up speed when there are many DAGs (Source)
  • Authenticated plugins endpoints (Source)

For a list of Astronomer-only changes, read the Astronomer Certified 2.0.2 changelog.

In addition, some bug fixes from Airflow 2.0.2 have been backported to Astronomer Certified 2.0.0-5. (Source)

Bug Fixes

  • Fixed an issue where IAM roles for service accounts (IRSA) would not connect to S3 back-end registries. (Source)
  • Fixed an issue where a Deployment would not have correctly labeled Kubernetes pods when using the Kubernetes Executor and the KubernetesPodOperator at the same time. (Source)


Release Date: April 13, 2021

Zero Webserver Downtime for Airflow 2.0+ Deployments

We're excited to announce that Astronomer v0.23.13 introduces zero Webserver downtime for Deployments running Airflow 2.0+. This feature is automatically enabled and requires no configuration in your system.

This change has a few effects:

  • The Airflow Webserver now requires less CPU and Memory.
  • Increasing your total # of DAGs no longer requires proportionally increasing your Webserver resources.
  • When you deploy code or configuration changes via astro deploy, these changes will appear in the Airflow UI in real time without an intermediary "Airflow is Starting Up" page.
  • The Webserver still restarts when you deploy code, but a "rolling restart" is applied so that the Webserver pod is slowly replaced by another instead of stopping entirely.

For context, this functionality is possible because Airflow 2.0 requires DAG Serialization, which is an open source feature that makes the Webserver stateless.

Minor Improvements and Bug Fixes

  • Added a new pgbouncer.networkPolicies.enabled value to Astronomer's Airflow Helm Chart so that organizations can exclusively enable or disable a pgBouncer network policy (Airflow Chart 0.19.0+). (Source)
  • Fixed an issue where new Deployments did not pull latest patch version of the corresponding Astronomer Certified image.
  • Changed the default Airflow Deployment image in Astronomer's Airflow Helm Chart to 2.0.0. (Source)
  • Upgraded the default pgBouncer and redis dependencies for new Airflow Deployments. (Source)
  • Fixed an issue where the v0.23 upgrade script would fail when upgrading the Astronomer Postgres DB. (Source)


Release Date: March 30, 2021

Platform Support for Ingress Annotations

With Astronomer Software 0.23.12, you can now configure the behavior of Ingress resources by specifying an annotation in your Astronomer Helm Chart. For example, you can now upgrade from the Classic Load Balancer to the Network Load Balancer on Amazon EKS by adding the following to your config.yaml file:

  ingressAnnotations: { nlb}

Then, push the changes to your platform as described in Apply a Config Change.

Platform Support for Disabling Alertmanager Clustering

In private networks, you might want to disable Alertmanager clustering to avoid failures due to a gossip protocol. To do so, you can now configure alertmanager.disableClustering in your config.yaml file and push the change to your platform as described in Apply a Config Change.

Support for Airflow 1.10.15

Airflow 1.10.15 comes with a suite of enhancements and bug fixes that follow Airflow 1.10.14, which was released in December of 2020 to make the migration to Airflow 2.0 as easy as possible. If you haven't migrated to Airflow 2.0 yet, you must upgrade to Airflow 1.10.14+ first.

Specifically, Airflow 1.10.15 includes the following changes:

  • Fix sync-perm to work correctly when update_fab_perms = False (commit)
  • Pin SQLAlchemy to <1.4 due to breakage of sqlalchemy-utils (commit)
  • Enable DAG Serialization by default (commit)
  • Stop showing Import Errors for Plugins in Webserver (commit)
  • Add role-based authentication backend (commit)
  • Show a "Warning" to Users with duplicate connections (commit)
  • KubernetesExecutor should accept images from executor_config (commit)
  • Fixed inability to import Airflow plugins on Python 3.8 (commit)
  • Fixed Scheduler not acknowledging active runs properly (commit)

For detailed guidelines on how to upgrade Airflow on Astronomer, read Upgrade Airflow. For more information on 1.10.15, check out the Airflow Release or the corresponding AC 1.10.15 changelog.

Bug fixes

  • Addressed CVEs found in the following platform images: ap-curator, ap-db-bootstrapper, ap-elasticsearch, ap-fluentd, ap-grafana, ap-kibana, ap-nats-server, ap-nginx, ap-nginx-es, ap-postgres-exporter, ap-registry, and ap-vendor/fluentd.
  • When two or more Fluentd parameters are set in Astronomer's config.yaml file, the resulting Fluentd configmap values are now properly concatenated. (Source)
  • The value for an Environment Variable that exists with the same name in 2+ Airflow Deployments now renders correctly when navigating between those Deployments in the Software UI.
  • Airflow task logs are no longer missing in the Airflow UI for users running Astronomer v0.23.9 on IKS. (Source)
  • Setting AIRFLOW__KUBERNETES__FS_GROUP:50000 in the Software UI now properly forces the fsGroup setting in the pod template file. (Source)
  • Nginx ingress scraping for Prometheus now scrapes and reports metrics for all nginx replicas in aggregate, as opposed to one pod at a time. (Source)
  • Fixed an issue where Airflow Schedulers were unable to adopt running Kubernetes Executor tasks due to a permissions error, causing those tasks to be queued and then terminated. (Source)


Release Date: February 11, 2021

Bug Fixes & Improvements

  • BugFix: Connections, Pools, and Variables in airflow_settings.yaml not built into image via Astronomer CLI if Airflow 2.0 image (Resolved in CLI v0.23.3)
  • BugFix: Houston API does not pull latest available Airflow patch on deploy (e.g. Airflow 2.0.0-1 if Airflow 2.0.0-2 is available)
  • BugFix: A SysAdmin Service Account created via the Houston API does not have right to see all Workspaces and can only be seen by a SysAdmin user in the Workspace(s) they're a part of.
  • BugFix: Workspace Service Account suddenly only available as a Deployment Service account (Error: Insufficient Permissions)
  • BugFix: The Houston DB migration pod stuck in interactive mode on upgrade to Astronomer v0.23
  • BugFix: Upgrade from Airflow 2.0.0 to Airflow 2.0.1 via the Astronomer CLI fails


Release Date: January 20, 2021

Platform Support for Airflow 2.0

Astronomer Software v0.23 offers full support for Airflow 2.0. Already available for local development, Airflow 2.0 is a momentous open-source release that includes a refactored Scheduler, over 30 UI/UX improvements, a new REST API and much more.

In support of Airflow 2.0, Astronomer v0.23 includes:

  • Support for Multiple Schedulers
  • A mechanism to ensure that users migrate to Airflow 1.10.14 prior to upgrading to 2.0
  • Support for Airflow's "upgrade check" in the Astronomer CLI ($ astro dev upgrade-check)

For local development guidelines, read Get Started with Airflow 2.0.

Support for Multiple Schedulers (Airflow 2.0+)

Airflow 2.0 allows users to provision multiple Airflow Schedulers for ultimate high-availability and scale. In tandem with full support for Airflow 2.0 on Astronomer, v0.23 supports the ability to provision up to 4 Schedulers via the Software UI for Airflow Deployments running Airflow 2.0+.

For guidelines, refer to Configure an Airflow Deployment on Astronomer. For Scheduler performance benchmarks and a technical deep-dive into Airflow's critical component, read "The Airflow 2.0 Scheduler".

Airflow Version Selection & Upgrade in Software UI/CLI

Astronomer v0.23 formally introduces Airflow Version to the Software UI, CLI, and API for an enhanced version selection and Airflow upgrade experience.

To see the version of Airflow your Deployment is running, refer to its Settings page in the Software UI. If you're interested in upgrading versions, you can now initialize the upgrade process via the Software UI or CLI for a guided experience. From there, you'll receive instructions to complete the process by updating the Astronomer Certified (AC) image in your Dockerfile.

For more information, refer to Manage Airflow Versions.

Real-time Support for Latest Astronomer Certified Versions

In contrast with v0.16, Astronomer Software v0.23 does not require that a release be shipped with explicit support for any Astronomer Certified version or set of Docker images. Decoupling these components helps you stay current with less overhead.

As soon as a version of Astronomer Certified is published to our updates service, all corresponding Astronomer Certified images and tags will become available for selection in the Software UI and CLI within 24 hours.

For more information, refer to Manage Airflow Versions.

New Deployment-level Permissions

Astronomer Software v0.23 introduces Deployment-level permissions, a much-awaited feature for large teams running multiple Airflow Deployments on Astronomer.

Within each individual Airflow Deployment, users can now configure and be assigned 1 of 3 user roles: Admin, Editor, or Viewer. If you operate with production and development environments, for example, you can restrict a user's access to your production Airflow Deployment as a Viewer but grant them full access to your development Airflow Deployment as an Admin all within the same Workspace. Users who exclusively need Workspace permissions do not require permissions to any or all Airflow Deployments within it.

This new permissions framework comes with support via the Software UI/API and a new set of commands for the Astronomer CLI. For more information, refer to User Permissions.

A New "Deployment Status" Framework

A significant infrastructural change in Astronomer v0.23 is the introduction of a new deploymentStatus query that allows the platform to more reliably communicate the status of a deploy and the overall health of your Airflow Deployment. We define a deploy as the process that begins when a user triggers a change to an Airflow Deployment (e.g. a code push from the Astronomer CLI or the addition of an Environment Variable) and ends when that change is successfully passed and considered to be live.

While this change largely sets the foundation for new features in later releases, Astronomer v0.23 includes:

  • A new banner in the Deployment view of the Software UI that indicates if a deploy is in progress.
  • Refined logic for Deployment Health Status (Unhealthy/Red, Healthy/Green, Deploying/Blue and Unknown/Gray) that's visible as a "bubble" next to all Airflow Deployments in the Software UI.
  • A set of error messages to alert you if a deploy failed or was otherwise not completed.

Improved Celery Worker Update Strategy

Astronomer Software v0.23 includes an improvement to the process by which new Celery Workers are created and begin to pick up tasks following a deploy to an Airflow Deployment on Astronomer.

Previously, the number of Celery Worker replicas that could be immediately created following a deploy was restricted to 25% of the total number of desired Celery Workers, until the original Workers shut down. This meant that it took longer for replacement Celery Workers to be created and start picking up Airflow tasks. Defined as maxSurge, that percentage is now set to 100%, allowing the maximum number of Celery Worker replicas to exist and push your data pipelines forward.

For users, this change will result in a quicker, more efficient, and more graceful deploy process.

Note: This improvement applies only to those running Airflow with the Celery Executor on Astronomer. For more information on Airflow Executors, refer to "Airflow Executors Explained" or Configure an Airflow Deployment on Astronomer.

Houston API Improvements

Astronomer v0.23 includes standardization of the following two mutations to be more strongly typed and reliable:

  • updateDeployment
  • createDeployment

If you're calling either of those mutations in your current workflow, Astronomer v0.23 will introduce a breaking change.

As we strive to polish and standardize the schema more generally, our API will undergo rapid and potentially breaking changes over the next few releases. The Astronomer CLI and UI will continue to stay in sync with API changes and is our recommended way to interact with the platform.

If calling our API programmatically is critical to your use case, reference the Houston API Documentation for details and stay in close touch with our team.

Support for v0.23 of the Astronomer CLI

Astronomer Software v0.23 is fully compatible with the latest version of the Astronomer CLI, v0.23.2.

In addition to functionality already available in v0.16, v0.23 of the Astronomer CLI includes:

  • Email validation on $ astro workspace user add
  • Clarify "success" output on $ astro deploy
  • BugFix: Inaccurate CLI version output on $ astro upgrade
  • BugFix: Correct output for deployment service-account create --help subcommand to read --deployment-id

Users running Astronomer Software v0.23 MUST upgrade to the latest version of the Astronomer CLI. To do so, run:

curl -sSL | sudo bash

For detailed instructions, refer to CLI Quickstart. For a full reference of Astronomer CLI releases, go to the Astronomer CLI GitHub repo.

Bug Fixes & Improvements

  • Default to latest available version of Airflow on Deployment Creation via Software UI/CLI
  • Opt-in users to Email Alerts by default
  • Improved user search in Software UI
  • Ability to search Deployment users by role via Houston API
  • Updated documentation links in Software UI
  • Display toast message in Software UI following Deployment deletion
  • Platform Upgrade to Prisma 2 (Database Toolkit for our Houston API)
  • Replace workspaceUuid with deploymentUuid in arg for deploymentVariables Houston API mutation
  • Houston and Commander Images now created with a non-root user
  • Support for new configuration options in Fluentd S3 Plugin (S3 path where Airflow logs are stored and server side encryption)
  • Improved OpenShift support
  • Support for Azure Database for PostgreSQL - Flexible Server