From a830d41524bca68e69fea60a5ace63ec0191a5a3 Mon Sep 17 00:00:00 2001 From: hectorcast-db Date: Thu, 28 May 2026 09:19:12 +0200 Subject: [PATCH] Enable test_spog_workspace_google_credentials (#1450) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit ## 🥞 Stacked PR Use this [link](https://github.com/databricks/databricks-sdk-py/pull/1450/files) to review incremental changes. - [**stack/hectorcastejon/enable-spog-workspace-google-credentials**](https://github.com/databricks/databricks-sdk-py/pull/1450) [[Files changed](https://github.com/databricks/databricks-sdk-py/pull/1450/files)] --------- ## Summary Enable test after server side issues have been fixed. ## How is this tested? N/A NO_CHANGELOG=true --- tests/integration/test_unified_profile.py | 6 ------ 1 file changed, 6 deletions(-) diff --git a/tests/integration/test_unified_profile.py b/tests/integration/test_unified_profile.py index 1163c4e61..283120376 100644 --- a/tests/integration/test_unified_profile.py +++ b/tests/integration/test_unified_profile.py @@ -87,12 +87,6 @@ def test_spog_workspace_azure_client_secret(isolated_env): # Environment: gcp-prod-ucacct def test_spog_workspace_google_credentials(isolated_env): - # google-credentials uses a GCP ID token with target_audience=cfg.host. - # On the unified host this produces the same token for both account and workspace - # requests (identical OIDC exchange, identical audience). Account-level APIs accept - # this token, but workspace-level APIs return 401. The X-Databricks-Org-Id header - # is set correctly. This appears to be a server-side limitation on unified hosts. - pytest.skip("google-credentials ID token is rejected for workspace operations on unified hosts") env = isolated_env("ucacct") host = env("UNIFIED_HOST") account_id = env("DATABRICKS_ACCOUNT_ID")