You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@airflow.apache.org by "stegololz (via GitHub)" <gi...@apache.org> on 2026/08/12 15:15:55 UTC

[PR] Make Keycloak permission creation quietly idempotent like its sibling helpers [airflow]

stegololz opened a new pull request, #71505:
URL: https://github.com/apache/airflow/pull/71505

   related: #70800
   
   Running the documented multi-team bootstrap sequence (`create-all --teams` followed by `create-team` per team) prints noise for every permission that `create-team` re-ensures:
   
   ```
   Policy creation skipped. Policy with name [Admin-team-a] already exists
   Policy creation skipped. Policy with name [ReadOnly-team-a] already exists
   ...
   ```
   
   The overlap is intentional (`create-team` is idempotent and re-ensures its team's slice), so the message reports a non-event. 
   
   Align `_create_scope_based_permission` with the three sibling helpers in the same module (group, role and aggregate policy creation), which already treat a "Conflicting policy" response as a silent no-op and re-raise everything else.
   
   Before:
   
   ```
   $ airflow keycloak-auth-manager create-team team-a --username admin
   Resources created successfully.
   Policy creation skipped. Policy with name [Admin-team-a] already exists
   Policy creation skipped. Policy with name [ReadOnly-team-a] already exists
   Policy creation skipped. Policy with name [GlobalList] already exists
   Policy creation skipped. Policy with name [ViewAccess] already exists
   Policy creation skipped. Policy with name [MenuAccess] already exists
   Permissions created successfully.
   ```
   
   After:
   
   ```
   $ airflow keycloak-auth-manager create-team team-a --username admin
   Resources created successfully.
   Permissions created successfully.
   ```
   
   ##### Was generative AI tooling used to co-author this PR?
   
   - [X] Yes (Claude Code)
   - [ ] No
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: commits-unsubscribe@airflow.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

Re: [PR] Make Keycloak permission creation quietly idempotent like its sibling helpers [airflow]

Posted by "vincbeck (via GitHub)" <gi...@apache.org>.
vincbeck merged PR #71505:
URL: https://github.com/apache/airflow/pull/71505


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: commits-unsubscribe@airflow.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org