fix: Support OPA for Airflow when user role is not 'Admin'#1512
Merged
Conversation
15df1f0 to
bc45cdf
Compare
1 task
razvan
previously approved these changes
May 28, 2026
Member
razvan
left a comment
There was a problem hiding this comment.
LGTM, nice work with the tests. One conflict needs to be fixed before merge though.
8e642d3 to
2f8fe65
Compare
2f8fe65 to
cd5d7d5
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Description
Fixes an issue in the Airflow 3 OPA auth manager that broke non-Admin users:
While also relevant for Airflow 2, I opted to only adjust it for Airflow 3. If required, I can look into Airflow 2 as a follow up.
Definition of Done Checklist
Note
Not all of these items are applicable to all PRs, the author should update this template to only leave the boxes in that are relevant.
Please make sure all these things are done and tick the boxes
TIP: Running integration tests with a new product image
The image can be built and uploaded to the kind cluster with the following commands:
See the output of
boilto retrieve the image manifest URI for<MANIFEST_URI>.