stegololz opened a new pull request, #71505: URL: https://github.com/apache/airflow/pull/71505
related: #70800 Running the documented multi-team bootstrap sequence (`create-all --teams` followed by `create-team` per team) prints noise for every permission that `create-team` re-ensures: ``` Policy creation skipped. Policy with name [Admin-team-a] already exists Policy creation skipped. Policy with name [ReadOnly-team-a] already exists ... ``` The overlap is intentional (`create-team` is idempotent and re-ensures its team's slice), so the message reports a non-event. Align `_create_scope_based_permission` with the three sibling helpers in the same module (group, role and aggregate policy creation), which already treat a "Conflicting policy" response as a silent no-op and re-raise everything else. Before: ``` $ airflow keycloak-auth-manager create-team team-a --username admin Resources created successfully. Policy creation skipped. Policy with name [Admin-team-a] already exists Policy creation skipped. Policy with name [ReadOnly-team-a] already exists Policy creation skipped. Policy with name [GlobalList] already exists Policy creation skipped. Policy with name [ViewAccess] already exists Policy creation skipped. Policy with name [MenuAccess] already exists Permissions created successfully. ``` After: ``` $ airflow keycloak-auth-manager create-team team-a --username admin Resources created successfully. Permissions created successfully. ``` ##### Was generative AI tooling used to co-author this PR? - [X] Yes (Claude Code) - [ ] No -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
