Skip to content

chore: add test to reproduce Airflow / OPA interop issue#800

Open
sweb wants to merge 5 commits into
mainfrom
chore-reproduce-airflow-opa-interop-issue
Open

chore: add test to reproduce Airflow / OPA interop issue#800
sweb wants to merge 5 commits into
mainfrom
chore-reproduce-airflow-opa-interop-issue

Conversation

@sweb
Copy link
Copy Markdown
Member

@sweb sweb commented May 27, 2026

Description

Regression test based on the reproduction of the initial issue: OPA rulesets are only picked up for Airflow if the user has the Airflow role Admin.

Fix is handled in stackabletech/docker-images#1512

Before merge:

@sweb sweb force-pushed the chore-reproduce-airflow-opa-interop-issue branch from cc6b39f to 71d39c3 Compare May 27, 2026 17:20
@razvan razvan self-requested a review May 28, 2026 06:46
@sweb sweb marked this pull request as ready for review May 28, 2026 07:39
@sbernauer sbernauer moved this to Development: Waiting for Review in Stackable Engineering May 28, 2026
@sbernauer
Copy link
Copy Markdown
Member

I'd say this fix is worth an changelog entry and release note ;)

razvan
razvan previously approved these changes May 28, 2026
Copy link
Copy Markdown
Member

@razvan razvan left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

lgtm with one remark.

Comment thread tests/templates/kuttl/opa-interop/41-check-listing.yaml Outdated
@sweb
Copy link
Copy Markdown
Member Author

sweb commented May 28, 2026

I'd say this fix is worth an changelog entry and release note ;)

fixed in 37194b3 and improved in 2727e23

@sweb sweb force-pushed the chore-reproduce-airflow-opa-interop-issue branch from 673a2ff to 2727e23 Compare May 28, 2026 12:00
@sweb
Copy link
Copy Markdown
Member Author

sweb commented May 28, 2026

Release Notes

fix: Allow OPA integration with arbitrary user role when using Airflow 3. Previously, this only worked for users with Admin role. This was fixed by overriding default behavior for authorized methods in the auth manager (stackabletech/docker-images#1512)

@sweb sweb added release-note Denotes a PR that will be considered when it comes time to generate release notes. scheduled-for/26.7.0 labels May 28, 2026
Copy link
Copy Markdown
Member

@razvan razvan left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

nice

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

release-note Denotes a PR that will be considered when it comes time to generate release notes. scheduled-for/26.7.0

Projects

Status: Development: Waiting for Review

Development

Successfully merging this pull request may close these issues.

3 participants