Skip to content

Make Keycloak auth manager multi-team #60885

@vincbeck

Description

@vincbeck

Description

The auth manager interface has been updated to support multi-team.

Example: ConnectionDetails contains team_name as information. This team_name is provided by Airflow when the environment is running in multi-team mode.

The auth manager receives the team information, now we should use it to make authorization policies. The idea is to pass down this team_name information to Keycloak so that it could be used when writing authorization policies

Use case/motivation

Multi-team mode is coming in Airflow. We need an auth manager which supports multi-team so that users can write their team specific authorization policies.

Related issues

No response

Are you willing to submit a PR?

  • Yes I am willing to submit a PR!

Code of Conduct

Metadata

Metadata

Assignees

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions