Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Feature] Support credential vending for Iceberg REST catalog in Doris #49356

Open
2 of 3 tasks
FANNG1 opened this issue Mar 22, 2025 · 0 comments
Open
2 of 3 tasks

[Feature] Support credential vending for Iceberg REST catalog in Doris #49356

FANNG1 opened this issue Mar 22, 2025 · 0 comments
Labels
kind/feature Categorizes issue or PR as related to a new feature.

Comments

@FANNG1
Copy link

FANNG1 commented Mar 22, 2025

Search before asking

  • I had searched in the issues and found no similar issues.

Description

Some Iceberg REST catalog implementations like Gravitino provide credential vending features to manage security information centrally and safely. If user has the right privilege to access the table, IRC server will generate a temporary token to access the underlying storage. Please refer to https://gravitino.apache.org/docs/0.8.0-incubating/security/credential-vending for more details about credential vending in Gravitino.

Use case

After supports credential vending, all security information is managed in Iceberg REST server, which means:

  1. user doesn't need to specify AKSK when creating catalogs
  2. User could use temporary scoped token to access the data without the risk of leaking the AKSK.

Related issues

No response

Are you willing to submit PR?

  • Yes I am willing to submit a PR!

Code of Conduct

@FANNG1 FANNG1 added the kind/feature Categorizes issue or PR as related to a new feature. label Mar 22, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
kind/feature Categorizes issue or PR as related to a new feature.
Projects
None yet
Development

No branches or pull requests

1 participant