You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@iceberg.apache.org by "amdubovoi (via GitHub)" <gi...@apache.org> on 2026/10/07 23:23:51 UTC
[PR] fix(io): pass GCS token expiry to gcsfs [iceberg-python]
amdubovoi opened a new pull request, #4089:
URL: https://github.com/apache/iceberg-python/pull/4089
# Rationale for this change
`FsspecFileIO` passes the GCS token to gcsfs without its expiry. gcsfs 2026.2.0 and later then look up the expiry at tokeninfo, which fails for down-scoped tokens that REST catalogs vend. Reads fail with `Provided token is either not valid, or expired.`
A token with `gcs.oauth2.token-expires-at` now goes to gcsfs as `google.oauth2.credentials.Credentials` with that expiry.
## Are these changes tested?
Yes, with unit tests and against a REST catalog that vends down-scoped GCS tokens.
## Are there any user-facing changes?
Yes. Vended GCS credentials work again with gcsfs 2026.2.0 and later.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@iceberg.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@iceberg.apache.org
For additional commands, e-mail: issues-help@iceberg.apache.org
Re: [PR] fix(io): pass GCS token expiry to gcsfs [iceberg-python]
Posted by "amdubovoi (via GitHub)" <gi...@apache.org>.
amdubovoi commented on PR #4089:
URL: https://github.com/apache/iceberg-python/pull/4089#issuecomment-6470354430
@kevinjqliu May I ask you to take a look since you've touched gcsfs stuff previously? And sorry for pinging once again, kinda blocked by this 😢
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@iceberg.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@iceberg.apache.org
For additional commands, e-mail: issues-help@iceberg.apache.org
Re: [PR] fix(io): pass GCS token expiry to gcsfs [iceberg-python]
Posted by "amdubovoi (via GitHub)" <gi...@apache.org>.
amdubovoi commented on PR #4089:
URL: https://github.com/apache/iceberg-python/pull/4089#issuecomment-6286557460
@rambleraptor @Fokko is it possible to get a review here, or have I done anything sidestepping the process?
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@iceberg.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@iceberg.apache.org
For additional commands, e-mail: issues-help@iceberg.apache.org