omar-massfih commented on PR #75810: URL: https://github.com/apache/airflow/pull/75810#issuecomment-6449521599
Update: I changed how the identity token is obtained, so the live test above no longer describes the current code. The first revision called `snowflake.connector.wif_util.create_attestation`, which is not a documented API of the connector. It now requests the token with each cloud's own library (`boto3`, `azure-identity`, `google-auth`, or the connection's token for OIDC), imported lazily. The description is updated to match. The Azure run I reported earlier (Container Apps, real Snowflake account) was against the previous revision. It exercised the same SQL API request and header, but not the new `azure-identity` call. I have not re-run it live on the new code, and AWS, GCP and OIDC are covered by unit tests only. Keeping this as a draft until the Azure run is repeated. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
