Skip to content

Add multi-team lookup to Azure Key Vault backend#65692

Open
PrithviBadiga wants to merge 2 commits intoapache:mainfrom
PrithviBadiga:prithvi/azure-multi-team-secrets
Open

Add multi-team lookup to Azure Key Vault backend#65692
PrithviBadiga wants to merge 2 commits intoapache:mainfrom
PrithviBadiga:prithvi/azure-multi-team-secrets

Conversation

@PrithviBadiga
Copy link
Copy Markdown
Contributor

Adds multi-team lookup support to AzureKeyVaultBackend.

Updates:

  • look up team-scoped secrets first when team_name is provided
  • fall back to the global secret when no team-scoped secret exists
  • avoid resolving team-scoped identifiers as global secrets when team_name is not provided
  • document the Azure team-scoped naming convention

Lookup behavior:

  • team-scoped: {prefix}-{team_name}-{secret_id}
  • global fallback: {prefix}-{secret_id}

Verification:

  • AIRFLOW_HOME=$(mktemp -d) PYTHONPATH=/Users/prith/Desktop/Codex/airflow-65682/airflow-core/src:/Users/prith/Desktop/Codex/airflow-65682/providers/microsoft/azure/src /Users/prith/Desktop/Codex/airflow/.venv/bin/python -m pytest /Users/prith/Desktop/Codex/airflow-65689-azure/providers/microsoft/azure/tests/unit/microsoft/azure/secrets/test_key_vault.py
  • /Users/prith/Desktop/Codex/airflow/.venv/bin/python -m ruff check /Users/prith/Desktop/Codex/airflow-65689-azure/providers/microsoft/azure/src/airflow/providers/microsoft/azure/secrets/key_vault.py /Users/prith/Desktop/Codex/airflow-65689-azure/providers/microsoft/azure/tests/unit/microsoft/azure/secrets/test_key_vault.py
  • /Users/prith/Desktop/Codex/airflow/.venv/bin/python -m ruff format --check /Users/prith/Desktop/Codex/airflow-65689-azure/providers/microsoft/azure/src/airflow/providers/microsoft/azure/secrets/key_vault.py /Users/prith/Desktop/Codex/airflow-65689-azure/providers/microsoft/azure/tests/unit/microsoft/azure/secrets/test_key_vault.py

Part of: #65682

Comment thread providers/microsoft/azure/docs/secrets-backends/azure-key-vault.rst Outdated
@potiuk potiuk added the ready for maintainer review Set after triaging when all criteria pass. label Apr 23, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants