You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@iceberg.apache.org by "PhillHenry (via GitHub)" <gi...@apache.org> on 2025/09/13 08:52:05 UTC
[I] The key for the expiration of an Azure token is different between Polaris and Iceberg [iceberg]
PhillHenry opened a new issue, #14069:
URL: https://github.com/apache/iceberg/issues/14069
### Apache Iceberg version
1.9.2
### Query engine
Spark
### Please describe the bug 🐞
I traced the code and saw it make a call to my Polaris instance [here](https://github.com/apache/iceberg/blob/05cd8b52e7d06d0d246475bd11f138d25947fd13/azure/src/main/java/org/apache/iceberg/azure/adlsv2/VendedAdlsCredentialProvider.java#L136) but although the call seems to return successfully with a token, the key in the config map for expiration is "expiration-time". This comes from Polaris [here](https://github.com/apache/polaris/blob/d69d7efff465d3a76447a0f5698c3386beb4e425/polaris-core/src/main/java/org/apache/polaris/core/storage/azure/AzureCredentialsStorageIntegration.java#L187).
However, Iceberg asserts [here](https://github.com/apache/iceberg/blob/05cd8b52e7d06d0d246475bd11f138d25947fd13/azure/src/main/java/org/apache/iceberg/azure/adlsv2/VendedAdlsCredentialProvider.java#L95) that the key should be "adls.refresh-credentials-endpoint" and consquently stops my from proceeding.
When I changed this code such that Polaris and Iceberg agree, I'm able to write to Azure blob storage via Spark (3.5.0).
### Willingness to contribute
- [x] I can contribute a fix for this bug independently
- [ ] I would be willing to contribute a fix for this bug with guidance from the Iceberg community
- [ ] I cannot contribute a fix for this bug at this time
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@iceberg.apache.org.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@iceberg.apache.org
For additional commands, e-mail: issues-help@iceberg.apache.org
Re: [I] The key for the expiration of an Azure token is different between Polaris and Iceberg [iceberg]
Posted by "PhillHenry (via GitHub)" <gi...@apache.org>.
PhillHenry closed issue #14069: The key for the expiration of an Azure token is different between Polaris and Iceberg
URL: https://github.com/apache/iceberg/issues/14069
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@iceberg.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@iceberg.apache.org
For additional commands, e-mail: issues-help@iceberg.apache.org
Re: [I] The key for the expiration of an Azure token is different between Polaris and Iceberg [iceberg]
Posted by "flyrain (via GitHub)" <gi...@apache.org>.
flyrain commented on issue #14069:
URL: https://github.com/apache/iceberg/issues/14069#issuecomment-3374341836
In terms of expiration time(`AzureProperties.ADLS_SAS_TOKEN_EXPIRES_AT_MS_PREFIX`), Polaris should honor it and use the same key, https://github.com/polaris-catalog/polaris/blob/main/polaris-core/src/main/java/org/apache/polaris/core/storage/StorageAccessProperty.java#L83-L83. I think it would be a bug or miss configuration if it's missing. Would you mind filing an issue or patch in Polaris if that's a bug?
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@iceberg.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@iceberg.apache.org
For additional commands, e-mail: issues-help@iceberg.apache.org
Re: [I] The key for the expiration of an Azure token is different between Polaris and Iceberg [iceberg]
Posted by "PhillHenry (via GitHub)" <gi...@apache.org>.
PhillHenry commented on issue #14069:
URL: https://github.com/apache/iceberg/issues/14069#issuecomment-3375728482
Move to a [Polaris issue](https://github.com/apache/polaris/issues/2766)
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@iceberg.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@iceberg.apache.org
For additional commands, e-mail: issues-help@iceberg.apache.org