Skip to content

Add multi-team lookup to Lockbox backend - #65695

Merged
vincbeck merged 3 commits into
apache:mainfrom
PrithviBadiga:prithvi/yandex-multi-team-secrets
Apr 23, 2026
Merged

Add multi-team lookup to Lockbox backend#65695
vincbeck merged 3 commits into
apache:mainfrom
PrithviBadiga:prithvi/yandex-multi-team-secrets

Conversation

@PrithviBadiga

Copy link
Copy Markdown
Contributor

Adds multi-team lookup support to LockboxSecretBackend.

Updates:

  • look up team-scoped secrets first when team_name is provided
  • fall back to the global secret when no team-scoped secret exists
  • avoid resolving team-scoped identifiers as global secrets when team_name is not provided
  • document the Lockbox team-scoped naming convention

Lookup behavior:

  • team-scoped: {prefix}/{team_name}/{secret_id}
  • global fallback: {prefix}/{secret_id}

Verification:

  • AIRFLOW_HOME=$(mktemp -d) PYTHONPATH=/Users/prith/Desktop/Codex/airflow-65682/airflow-core/src:/Users/prith/Desktop/Codex/airflow-65682/providers/yandex/src /Users/prith/Desktop/Codex/airflow/.venv/bin/python -m pytest /Users/prith/Desktop/Codex/airflow-65689-yandex/providers/yandex/tests/unit/yandex/secrets/test_lockbox.py
  • /Users/prith/Desktop/Codex/airflow/.venv/bin/python -m ruff check /Users/prith/Desktop/Codex/airflow-65689-yandex/providers/yandex/src/airflow/providers/yandex/secrets/lockbox.py /Users/prith/Desktop/Codex/airflow-65689-yandex/providers/yandex/tests/unit/yandex/secrets/test_lockbox.py
  • /Users/prith/Desktop/Codex/airflow/.venv/bin/python -m ruff format --check /Users/prith/Desktop/Codex/airflow-65689-yandex/providers/yandex/src/airflow/providers/yandex/secrets/lockbox.py /Users/prith/Desktop/Codex/airflow-65689-yandex/providers/yandex/tests/unit/yandex/secrets/test_lockbox.py

Part of: #65682

Comment threadproviders/yandex/src/airflow/providers/yandex/secrets/lockbox.py Outdated
@vincbeck
vincbeck merged commit 8680686 into apache:mainApr 23, 2026
89 checks passed
@PrithviBadiga
PrithviBadiga deleted the prithvi/yandex-multi-team-secrets branch April 24, 2026 14:09
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants

@PrithviBadiga@vincbeck@potiuk