Skip to content

Add multi-team lookup to Lockbox backend#65695

Open
PrithviBadiga wants to merge 1 commit intoapache:mainfrom
PrithviBadiga:prithvi/yandex-multi-team-secrets
Open

Add multi-team lookup to Lockbox backend#65695
PrithviBadiga wants to merge 1 commit intoapache:mainfrom
PrithviBadiga:prithvi/yandex-multi-team-secrets

Conversation

@PrithviBadiga
Copy link
Copy Markdown
Contributor

Adds multi-team lookup support to LockboxSecretBackend.

Updates:

  • look up team-scoped secrets first when team_name is provided
  • fall back to the global secret when no team-scoped secret exists
  • avoid resolving team-scoped identifiers as global secrets when team_name is not provided
  • document the Lockbox team-scoped naming convention

Lookup behavior:

  • team-scoped: {prefix}/{team_name}/{secret_id}
  • global fallback: {prefix}/{secret_id}

Verification:

  • AIRFLOW_HOME=$(mktemp -d) PYTHONPATH=/Users/prith/Desktop/Codex/airflow-65682/airflow-core/src:/Users/prith/Desktop/Codex/airflow-65682/providers/yandex/src /Users/prith/Desktop/Codex/airflow/.venv/bin/python -m pytest /Users/prith/Desktop/Codex/airflow-65689-yandex/providers/yandex/tests/unit/yandex/secrets/test_lockbox.py
  • /Users/prith/Desktop/Codex/airflow/.venv/bin/python -m ruff check /Users/prith/Desktop/Codex/airflow-65689-yandex/providers/yandex/src/airflow/providers/yandex/secrets/lockbox.py /Users/prith/Desktop/Codex/airflow-65689-yandex/providers/yandex/tests/unit/yandex/secrets/test_lockbox.py
  • /Users/prith/Desktop/Codex/airflow/.venv/bin/python -m ruff format --check /Users/prith/Desktop/Codex/airflow-65689-yandex/providers/yandex/src/airflow/providers/yandex/secrets/lockbox.py /Users/prith/Desktop/Codex/airflow-65689-yandex/providers/yandex/tests/unit/yandex/secrets/test_lockbox.py

Part of: #65682

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants