set auth_backend for fab sec manager (#251)

tests/README.md

@@ -1,6 +1,6 @@
 # Testing
 
-This project uses the [helm-unittest project](https://github.com/quintush/helm-unittest) to test the helm charts included within. Once that plugin is installed, you can run tests with `helm unitest -3 .`
+This project uses the [helm-unittest project](https://github.com/quintush/helm-unittest) to test the helm charts included within. Once that plugin is installed, you can run tests with `helm unittest -3 .`
 
 ## Writing tests
 

tests/configmap_test.yaml

@@ -36,3 +36,22 @@ tests:
       - notMatchRegex:
           path: data.airflow_local_settings\.py
           pattern: '{"somekey":"somevalue"}'
+  - it: should use default auth_backend value deny_all
+    asserts:
+      - matchRegex:
+          path: data.airflow\.cfg
+          pattern: "airflow.api.auth.backend.deny_all"
+      - notMatchRegex:
+          path: data.airflow\.cfg
+          pattern: "astronomer.flask_appbuilder.current_user_backend"
+  - it: should use fab security auth_backend value when useAstroSecurityManager is enabled
+    set:
+      airflow:
+        useAstroSecurityManager: true
+    asserts:
+      - matchRegex:
+          path: data.airflow\.cfg
+          pattern: "astronomer.flask_appbuilder.current_user_backend"
+      - notMatchRegex:
+          path: data.airflow\.cfg
+          pattern: "airflow.api.auth.backend.deny_all"

values.yaml

@@ -186,6 +186,8 @@ airflow:
       "sidecar.istio.io/inject": "false"
 
   config:
+    api:
+      auth_backend: '{{ ternary "astronomer.flask_appbuilder.current_user_backend" "airflow.api.auth.backend.deny_all" .Values.useAstroSecurityManager }}'
     operators:
       default_queue: celery
     celery: # compat