The GitHub Actions job "Tests (AMD)" on airflow.git/feature/kafka-msk-iam-auth 
has failed.
Run started by GitHub user TimurRakhmatullin86 (triggered by vincbeck).

Head commit for run:
a8264ed558dd7a06d0f12c71390c455da31f52d1 / Timur Rakhmatullin 
<[email protected]>
Add Amazon MSK IAM (OAUTHBEARER) support to Apache Kafka provider

The Kafka provider already injects an ``oauth_cb`` token callback for Google
Managed Kafka based on the bootstrap servers hostname. Amazon MSK offers the
same OAUTHBEARER-based IAM authentication (and MSK Serverless supports IAM
only), but there was no equivalent branch, forcing users to wire the token
signer by hand.

This adds a symmetric branch: when the bootstrap servers point at an Amazon
MSK endpoint (``*.kafka.<region>.amazonaws.com`` or
``*.kafka-serverless.<region>.amazonaws.com``, including ``.cn`` regions) and
``sasl.mechanism`` is ``OAUTHBEARER``, the hook derives the AWS region from the
hostname and installs an ``oauth_cb`` backed by
``aws_msk_iam_sasl_signer.MSKAuthTokenProvider``. The callback converts the
signer's millisecond expiry to the seconds expected by confluent-kafka. An
explicit user-provided ``oauth_cb`` is never overwritten, and a missing signer
library raises ``AirflowOptionalProviderFeatureException`` pointing at the new
``msk`` extra.

Adds the ``msk`` optional dependency, unit tests, and connection docs.

Report URL: https://github.com/apache/airflow/actions/runs/28762523642

With regards,
GitHub Actions via GitBox


---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to