acc: run jobs destroy_without_mgmtperms/with_permissions locally#5769
Merged
radakam merged 2 commits intoJul 3, 2026
Conversation
Collaborator
Integration test reportCommit: 638f947
21 interesting tests: 14 SKIP, 4 KNOWN, 3 RECOVERED
Top 4 slowest tests (at least 2 minutes):
|
janniklasrose
approved these changes
Jul 3, 2026
pietern
approved these changes
Jul 3, 2026
Convert the destroy_without_mgmtperms/with_permissions acceptance test to run against the local testserver in addition to cloud. The test exercises a guest service principal (the as-test-sp helper) that lacks manage permissions on a job, so the testserver needs a multi-identity, permission-aware model. - testserver: share one FakeWorkspace across a test's user, primary SP, and guest SP tokens by stripping the dbapi0/dbapi1/dbapi2 identity prefix, so multiple identities see the same state like a real workspace. - testserver: resolve identity per request token; the guest SP (dbapi2) reports the deco-test-spn display name on /Me, matching the named SP on cloud, while single-identity SP tests are unaffected. - testserver: enforce job read/manage/delete permissions for the guest SP with the same PERMISSION_DENIED error strings the backend returns. - harness: inject TEST_SP_TOKEN for local runs (guest prefix + the primary token's uuid suffix) so as-test-sp shares the workspace. - script: fall back DATABRICKS_CLIENT_ID to the current identity locally so the owner principal matches cloud.
Trim the comments added in the previous commit to be short and meaningful.
radakam
force-pushed
the
acc-local-destroy-without-mgmtperms-with-permissions
branch
from
9fb82ac to
638f947
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
4 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Changes
Why
The test drives a guest service principal (as-test-sp) that lacks manage permissions on a job and tries to read/destroy it. Running it locally requires the fake workspace to model multiple identities sharing one workspace and to enforce job permissions the way cloud does. Golden files are unchanged, so local output now matches cloud for both engines.
Tests