seanghaeli opened a new pull request, #66736: URL: https://github.com/apache/airflow/pull/66736
## Summary - Replace the fixed `time.sleep(60)` after IAM trust policy update with an active validation task that confirms propagation using exponential backoff - The new `wait_for_trust_policy_propagation` task uses `iam:GetRole` + `iam:SimulatePrincipalPolicy` to verify the trust policy is consistent before proceeding - Add `--retry 3 --retry-delay 5` to the eksctl curl download for transient network resilience ## Motivation The `example_emr_eks` system test was failing intermittently because IAM OIDC-based trust policy propagation can take 2-5+ minutes. The fixed sleep was either too short (causing auth failures) or unnecessarily long (wasting CI time). ## Test plan - [ ] Verify DAG parses without errors - [ ] Run system test end-to-end — confirm the validation task correctly detects propagation and proceeds - [ ] Confirm transient failure rate decreases over multiple runs --- ##### Was generative AI tooling used to co-author this PR? - [X] Yes — Claude Code (Opus 4.6) Generated-by: Claude Code (Opus 4.6) following [the guidelines](https://github.com/apache/airflow/blob/main/contributing-docs/05_pull_requests.rst#gen-ai-assisted-contributions) -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
