[KenanAdel]

Closes: #26438

This PR adds a new configuration option include_renewal_lifetime under the [kerberos] section. This allows deployments using Kerberos implementations that do not support the -r flag (such as Heimdal Kerberos) to disable it, while maintaining complete backward compatibility for MIT Kerberos users.

Unit tests have also been added to verify the generated kinit command for both configurations (True and False).

[boring-cyborg]

Congratulations on your first Pull Request and welcome to the Apache Airflow community! If you have any issues or are unsure about any anything please check our Contributors' Guide
Here are some useful points:

• Pay attention to the quality of your code (ruff, mypy and type annotations). Our prek-hooks will help you with that.
• In case of a new feature add useful documentation (in docstrings or in docs/ directory). Adding a new operator? Check this short guide Consider adding an example Dag that shows how users should use it.
• Consider using Breeze environment for testing locally, it's a heavy docker but it ships with a working Airflow and a lot of integrations.
• Be patient and persistent. It might take some time to get a review or get the final approval from Committers.
• Please follow ASF Code of Conduct for all communication including (but not limited to) comments on Pull Requests, Mailing list and Slack.
• Be sure to read the Airflow Coding style.
• Always keep your Pull Requests rebased, otherwise your build might fail due to changes not related to your commits.
  Apache Airflow is a community-driven project and together we are making it better 🚀.
  In case of doubts contact the developers at:
  Mailing List: dev@airflow.apache.org
  Slack: https://s.apache.org/airflow-slack

[KenanAdel]

Hi everyone,

I have updated the core Kerberos code logic along with its corresponding documentation.

To ensure everything is fully verified, I simulated the checks and ran the tests locally inside the Breeze Docker environment:

1. Unit Tests: All 12 Kerberos unit tests passed successfully:
   ================ 12 passed, 1 warning in 133.55s (0:02:13) ================

2. Documentation Build: Verified locally using breeze build-docs apache-airflow. The core documentation builds successfully now (build succeeded). The previous 2244 errors are completely resolved. (Note: Any remaining local collection/intersphinx warnings are just due to missing provider inventory caches on my standalone local setup, which the remote CI handles automatically).

The implementation and documentation are fully verified locally and ready for review!

[KenanAdel]

@potiuk Hi Jarek,

I have updated kerberos.py directly to fix the Python bracket formatting issue caught by the static checks. The PR is now ready for your review and workflow approval. Thank you!

[KenanAdel]

Hi @potiuk, I have updated the branch to keep it in sync with the base branch. Could you please approve the workflows to run whenever you have a moment? The PR will be ready for your review right after. Thank you!

[potiuk]

Two things before this can go in — the code itself looks good:

• Version: correcting my earlier comment — I'd said 3.3.0, but this didn't make the 3.3.0 cut (it's already branched), so as a new feature it belongs in version_added: 3.4.0. Please bump it.
• Title: the feat: prefix is Conventional Commits, which apache/airflow doesn't use — please drop it (e.g. "Make kinit renewable lifetime configurable for Heimdal Kerberos support").

Not approving until the version is corrected; otherwise this is ready.

---

This review was drafted by an AI-assisted tool and confirmed by an Airflow maintainer. The findings below are observations, not blockers; an Airflow maintainer — a real person — will take the next look at the PR. If you think a finding is mis-applied, please reply on the PR and a maintainer will weigh in.

More on how Airflow handles maintainer review: contributing-docs/05_pull_requests.rst.

[boring-cyborg]

Awesome work, congrats on your first merged pull request! You are invited to check our Issue Tracker for additional contributions.