You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@airflow.apache.org by "vincbeck (via GitHub)" <gi...@apache.org> on 2026/01/21 16:31:52 UTC
[I] Make Keycloak auth manager multi-team [airflow]
vincbeck opened a new issue, #60885:
URL: https://github.com/apache/airflow/issues/60885
### Description
The [auth manager interface](https://github.com/apache/airflow/blob/main/airflow-core/src/airflow/api_fastapi/auth/managers/base_auth_manager.py) has been updated to support multi-team.
Example: `ConnectionDetails` contains `team_name` as information. This `team_name` is provided by Airflow when the environment is running in multi-team mode.
The auth manager receives the team information, now we should use it to make authorization policies. The idea is to pass down this `team_name` information to Keycloak so that it could be used when writing authorization policies
### Use case/motivation
Multi-team mode is coming in Airflow. We need an auth manager which supports multi-team so that users can write their team specific authorization policies.
### Related issues
_No response_
### Are you willing to submit a PR?
- [ ] Yes I am willing to submit a PR!
### Code of Conduct
- [x] I agree to follow this project's [Code of Conduct](https://github.com/apache/airflow/blob/main/CODE_OF_CONDUCT.md)
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@airflow.apache.org.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] Make Keycloak auth manager multi-team [airflow]
Posted by "vincbeck (via GitHub)" <gi...@apache.org>.
vincbeck commented on issue #60885:
URL: https://github.com/apache/airflow/issues/60885#issuecomment-3779453156
I assigned it to you David Blain following our conversation
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@airflow.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] Make Keycloak auth manager multi-team [airflow]
Posted by "stegololz (via GitHub)" <gi...@apache.org>.
stegololz commented on issue #60885:
URL: https://github.com/apache/airflow/issues/60885#issuecomment-3835462469
Initial PR was splitted in two. https://github.com/apache/airflow/pull/61256 now only refer to the CLI changes and https://github.com/apache/airflow/pull/61351 contains the Auth manager changes
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@airflow.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] Make Keycloak auth manager multi-team [airflow]
Posted by "vincbeck (via GitHub)" <gi...@apache.org>.
vincbeck commented on issue #60885:
URL: https://github.com/apache/airflow/issues/60885#issuecomment-3824069689
> Thanks [@vincbeck](https://github.com/vincbeck). I’m implementing this on [@dabla](https://github.com/dabla)’s behalf and have opened a PR: [#61256](https://github.com/apache/airflow/pull/61256). I’ll keep the issue updated.
Thank you! :D
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@airflow.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] Make Keycloak auth manager multi-team [airflow]
Posted by "vincbeck (via GitHub)" <gi...@apache.org>.
vincbeck closed issue #60885: Make Keycloak auth manager multi-team
URL: https://github.com/apache/airflow/issues/60885
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@airflow.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] Make Keycloak auth manager multi-team [airflow]
Posted by "vincbeck (via GitHub)" <gi...@apache.org>.
vincbeck commented on issue #60885:
URL: https://github.com/apache/airflow/issues/60885#issuecomment-3945267449
Completed as part of https://github.com/apache/airflow/pull/61351 and https://github.com/apache/airflow/pull/61256
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@airflow.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] Make Keycloak auth manager multi-team [airflow]
Posted by "stegololz (via GitHub)" <gi...@apache.org>.
stegololz commented on issue #60885:
URL: https://github.com/apache/airflow/issues/60885#issuecomment-3823529330
Thanks @vincbeck. I’m implementing this on @dabla’s behalf and have opened a PR: https://github.com/apache/airflow/pull/61256. I’ll keep the issue updated.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@airflow.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org