guitcastro opened a new issue, #1028:
URL: https://github.com/apache/iceberg-python/issues/1028

   ### Apache Iceberg version
   
   main (development)
   
   ### Please describe the bug 🐞
   
   Nessie s3 signer use a different endpoint than `/aws/s3/sign` and also 
includes query parameters in the URI. Therefore, we need to honor their 
`s3.signer.endpoint` which is currently static in code. 
   
   Additionally, we need to parameterize the X-Iceberg-Access-Delegation, which 
currently has the value vended-credentials hardcoded. This is necessary because 
Nessie does not return the `s3.signer.endpoint` when the value is set to 
`vended-credentials`.
   
   An example of Nessie config from get table endpoint:
   
   ```
       "config": {
           "s3.path-style-access": "true",
           "s3.signer.uri": "http://127.0.0.1:19120/iceberg/";,
           "s3.endpoint": "http://minio:9000/";,
           "io-impl": "org.apache.iceberg.aws.s3.S3FileIO",
           "s3.signer.endpoint": 
"v1/main/s3-sign/default.datasets?e=1723099768&b=s3%3A%2F%2Fwarehouse&k=f1379b71-f73a-4fcd-8765-4a1aba6a3585&s=22f3f6b52d586c3b9b310eb2df0e2e51d0c8d0b03030f5bb25f8b2548ef406da&w=s3%3A%2F%2Fwarehouse%2Fdefault%2Fdatasets_f244e57f-143a-4e19-b1c6-591cafbe96fe",
           "s3.remote-signing-enabled": "true",
           "client.region": "us-east-1"
       }
   ```


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@iceberg.apache.org.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org


---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscr...@iceberg.apache.org
For additional commands, e-mail: issues-h...@iceberg.apache.org

Reply via email to