Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[EPIC] Support credential vending in Gravitino #4398

Closed
13 tasks done
jerryshao opened this issue Aug 6, 2024 · 2 comments
Closed
13 tasks done

[EPIC] Support credential vending in Gravitino #4398

jerryshao opened this issue Aug 6, 2024 · 2 comments
Labels
epic Key feature

Comments

@jerryshao
Copy link
Contributor

jerryshao commented Aug 6, 2024 •
edited by FANNG1
Loading

Describe the proposal

As a centralized service, Gravitino should provide a mechanism to let third-party applications/service integrate with it to get temporary access to the underlying services, like S3, HDFS, HMS, etc on behalf of their users. the credential vending mechanism is heavily adopted in the cloud service. So Gravitino should provide a similar mehanism.

Task list
@jerryshao jerryshao added the epic Key feature label Aug 6, 2024
@jerryshao jerryshao added this to the Gravitino 0.7.0 milestone Aug 6, 2024
@lw-yang
Copy link
Contributor

lw-yang commented Aug 9, 2024

This is the Proposal of the secret management system, which should be related to credentials vending

https://docs.google.com/document/d/1CUUtUXJHU89zbaOUkQRMVTfbAS5qlg_xiz5y6kHd37s/edit

@FANNG1
Copy link
Contributor

FANNG1 commented Sep 5, 2024

based on the design of @lw-yang , proposed a new design https://docs.google.com/document/d/1fovK0ylSmI45ynrCPcnRZqzyPDn7DRNb_ExdbjVPq0k/edit

This was referenced Sep 23, 2024
Closed
Closed
Closed
@FANNG1 FANNG1 mentioned this issue Oct 9, 2024
Closed
@jerryshao jerryshao removed this from the Gravitino 0.7.0 milestone Oct 21, 2024
This was referenced Nov 20, 2024
Closed
Closed
Closed
Closed
Closed
Closed
Closed
This was referenced Dec 6, 2024
Closed
Closed
@orenccl orenccl mentioned this issue Dec 17, 2024
Closed
@FANNG1 FANNG1 mentioned this issue Dec 26, 2024
Merged
@FANNG1 FANNG1 closed this as completed in d49e7eb Dec 27, 2024
Abyss-lord pushed a commit to Abyss-lord/gravitino that referenced this issue Dec 29, 2024
@FANNG1 @Abyss-lord
[apache#4398] feat(core): support credential cache for Gravitino serv…
b3475db 
…er (apache#5995)

### What changes were proposed in this pull request?

add credential cache for Gravitino server, not support for Iceberg rest
server yet.

### Why are the changes needed?

Fix: apache#4398 

### Does this PR introduce _any_ user-facing change?
no

### How was this patch tested?

testing in local env, get credential from Gravitino server and see
whether it's fetched from remote or local cache
This was referenced Jan 2, 2025
Closed
Closed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
epic Key feature
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
3 participants
@jerryshao @FANNG1 @lw-yang