PrithviBadiga opened a new pull request, #65694:
URL: https://github.com/apache/airflow/pull/65694
Adds multi-team lookup support to `KubernetesSecretsBackend`.
Updates:
- add `team_label` support for discovering team-scoped secrets
- look up team-scoped secrets first when `team_name` is provided
- fall back to unlabeled global secrets when no team-scoped secret exists
- avoid resolving team-scoped identifiers as global secrets when `team_name`
is not provided
- document the Kubernetes team label selector behavior
Lookup behavior:
- team-scoped: `{id_label}={secret_id},{team_label}={team_name}`
- global fallback: `{id_label}={secret_id},!{team_label}`
Verification:
- `AIRFLOW_HOME=$(mktemp -d)
PYTHONPATH=/Users/prith/Desktop/Codex/airflow-65682/airflow-core/src:/Users/prith/Desktop/Codex/airflow-65682/providers/cncf/kubernetes/src
/Users/prith/Desktop/Codex/airflow/.venv/bin/python -m pytest
/Users/prith/Desktop/Codex/airflow-65689-kubernetes/providers/cncf/kubernetes/tests/unit/cncf/kubernetes/secrets/test_kubernetes_secrets_backend.py`
- `/Users/prith/Desktop/Codex/airflow/.venv/bin/python -m ruff check
/Users/prith/Desktop/Codex/airflow-65689-kubernetes/providers/cncf/kubernetes/src/airflow/providers/cncf/kubernetes/secrets/kubernetes_secrets_backend.py
/Users/prith/Desktop/Codex/airflow-65689-kubernetes/providers/cncf/kubernetes/tests/unit/cncf/kubernetes/secrets/test_kubernetes_secrets_backend.py`
- `/Users/prith/Desktop/Codex/airflow/.venv/bin/python -m ruff format
--check
/Users/prith/Desktop/Codex/airflow-65689-kubernetes/providers/cncf/kubernetes/src/airflow/providers/cncf/kubernetes/secrets/kubernetes_secrets_backend.py
/Users/prith/Desktop/Codex/airflow-65689-kubernetes/providers/cncf/kubernetes/tests/unit/cncf/kubernetes/secrets/test_kubernetes_secrets_backend.py`
Part of: #65682
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
