Add warning when bundle path isn't accessible to impersonated user#60278
Merged
potiuk merged 1 commit intoapache:mainfrom Jan 15, 2026
Merged
Add warning when bundle path isn't accessible to impersonated user#60278potiuk merged 1 commit intoapache:mainfrom
potiuk merged 1 commit intoapache:mainfrom
Conversation
potiuk
reviewed
Jan 9, 2026
2 tasks
8578d72 to
6af414d
Compare
potiuk
approved these changes
Jan 13, 2026
6af414d to
7107045
Compare
potiuk
approved these changes
Jan 15, 2026
Backport failed to create: v3-1-test. View the failure log Run details
You can attempt to backport this manually by running: cherry_picker 0e0fceb v3-1-testThis should apply the commit to the v3-1-test branch and leave the commit in conflict state marking After you have resolved the conflicts, you can continue the backport process by running: cherry_picker --continue |
1 task
jason810496
pushed a commit
to jason810496/airflow
that referenced
this pull request
Jan 22, 2026
86 tasks
jhgoebbert
pushed a commit
to jhgoebbert/airflow_Owen-CH-Leung
that referenced
this pull request
Feb 8, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
- This PR was created with the help of AIRelated: #60270, #60387
Context
When using Git DAG bundles with user impersonation (
run_as_user), tasks fail due to permission conflicts. The bundle is cloned by the main airflow user, but the impersonated user needs to access the repository files during task execution.This PR provides early warning to help users diagnose these issues before they cause task failures.
Changes
_verify_bundle_access(bundle_instance, log)New helper function in
task_runner.pythat:The helper is called in
parse()afterbundle_instance.initialize(), which means it runs after impersonation occurs. This ensures the check reflects the impersonated user's actual access rights.^ Add meaningful description above
Read the Pull Request Guidelines for more information.
In case of fundamental code changes, an Airflow Improvement Proposal (AIP) is needed.
In case of a new dependency, check compliance with the ASF 3rd Party License Policy.
In case of backwards incompatible changes please leave a note in a newsfragment file, named
{pr_number}.significant.rstor{issue_number}.significant.rst, in airflow-core/newsfragments.