You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@polaris.apache.org by "adutra (via GitHub)" <gi...@apache.org> on 2025/06/03 21:26:27 UTC
[I] Credentials provided or generated when bootstrapping should not be rotated [polaris]
adutra opened a new issue, #801:
URL: https://github.com/apache/polaris/issues/801
### Describe the bug
When bootstrapping a realm, either with the env var `POLARIS_BOOTSTRAP_CREDENTIALS` or using the admin tool, the provided secrets get rotated.
Because previous secrets are still valid, this works, but I would argue that that's a bad user experience: the user said they want secret A, and they get secret B, and it's B that gets printed to stdout (for in-memory metastores).
What is the reason for doing this rotation?
* If the secrets were randomly generated, rotating is meaningless
* If the secrets were provided by the user, rotating effectively overrides their instructions.
### To Reproduce
_No response_
### Actual Behavior
_No response_
### Expected Behavior
_No response_
### Additional context
_No response_
### System information
_No response_
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@polaris.apache.org.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] Credentials provided or generated when bootstrapping should not be rotated [polaris]
Posted by "adutra (via GitHub)" <gi...@apache.org>.
adutra closed issue #801: Credentials provided or generated when bootstrapping should not be rotated
URL: https://github.com/apache/polaris/issues/801
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@polaris.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] Credentials provided or generated when bootstrapping should not be rotated [polaris]
Posted by "dimas-b (via GitHub)" <gi...@apache.org>.
dimas-b commented on issue #801:
URL: https://github.com/apache/polaris/issues/801#issuecomment-2937247478
re-opening per discussions in #1799
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@polaris.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] Credentials provided or generated when bootstrapping should not be rotated [polaris]
Posted by "collado-mike (via GitHub)" <gi...@apache.org>.
collado-mike commented on issue #801:
URL: https://github.com/apache/polaris/issues/801#issuecomment-2599363950
I don't recall the discussion, but I think that if the secrets are provided via env variables, they should _not_ be rotated except by the user.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@polaris.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] Credentials provided or generated when bootstrapping should not be rotated [polaris]
Posted by "singhpk234 (via GitHub)" <gi...@apache.org>.
singhpk234 commented on issue #801:
URL: https://github.com/apache/polaris/issues/801#issuecomment-2937969912
closing this issue, please feel free to re-open if some part of the fix got missed
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@polaris.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] Credentials provided or generated when bootstrapping should not be rotated [polaris]
Posted by "eric-maynard (via GitHub)" <gi...@apache.org>.
eric-maynard commented on issue #801:
URL: https://github.com/apache/polaris/issues/801#issuecomment-2644359416
I think so; if the rotation isn't intentional then we should try to get rid of it
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@polaris.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] Credentials provided or generated when bootstrapping should not be rotated [polaris]
Posted by "adutra (via GitHub)" <gi...@apache.org>.
adutra commented on issue #801:
URL: https://github.com/apache/polaris/issues/801#issuecomment-2643124278
Is it OK to go ahead and fix this?
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@polaris.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] Credentials provided or generated when bootstrapping should not be rotated [polaris]
Posted by "dimas-b (via GitHub)" <gi...@apache.org>.
dimas-b commented on issue #801:
URL: https://github.com/apache/polaris/issues/801#issuecomment-2940252284
Re-fixed by #1804
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@polaris.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] Credentials provided or generated when bootstrapping should not be rotated [polaris]
Posted by "singhpk234 (via GitHub)" <gi...@apache.org>.
singhpk234 closed issue #801: Credentials provided or generated when bootstrapping should not be rotated
URL: https://github.com/apache/polaris/issues/801
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@polaris.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] Credentials provided or generated when bootstrapping should not be rotated [polaris]
Posted by "eric-maynard (via GitHub)" <gi...@apache.org>.
eric-maynard commented on issue #801:
URL: https://github.com/apache/polaris/issues/801#issuecomment-2596380200
@collado-mike, I recall we discussed this in my PR to use credential hashes
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@polaris.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org