You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@iceberg.apache.org by "mrendi29 (via GitHub)" <gi...@apache.org> on 2025/10/28 21:21:44 UTC
[I] Add Hashicorp Vault as encryption client [iceberg]
mrendi29 opened a new issue, #14437:
URL: https://github.com/apache/iceberg/issues/14437
### Feature Request / Improvement
Currently there are no published KMS Client implementation for Iceberg encryption.
I am not sure if KMS Clients are envisioned to be part of Iceberg or rather implemented outside of Iceberg.
We have tested Hashicorp Vault Transit engine at Akamai and would be happy to contribute this back if the community thinks that KMS clients should live inside Iceberg.
### Query engine
Spark
### Willingness to contribute
- [x] I can contribute this improvement/feature independently
- [x] I would be willing to contribute this improvement/feature with guidance from the Iceberg community
- [ ] I cannot contribute this improvement/feature at this time
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@iceberg.apache.org.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@iceberg.apache.org
For additional commands, e-mail: issues-help@iceberg.apache.org
Re: [I] Add Hashicorp Vault as encryption client [iceberg]
Posted by "github-actions[bot] (via GitHub)" <gi...@apache.org>.
github-actions[bot] commented on issue #14437:
URL: https://github.com/apache/iceberg/issues/14437#issuecomment-4331484098
This issue has been automatically marked as stale because it has been open for 180 days with no activity. It will be closed in next 14 days if no further activity occurs. To permanently prevent this issue from being considered stale, add the label 'not-stale', but commenting on the issue is preferred when possible.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@iceberg.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@iceberg.apache.org
For additional commands, e-mail: issues-help@iceberg.apache.org
Re: [I] Add Hashicorp Vault as encryption client [iceberg]
Posted by "github-actions[bot] (via GitHub)" <gi...@apache.org>.
github-actions[bot] closed issue #14437: Add Hashicorp Vault as encryption client
URL: https://github.com/apache/iceberg/issues/14437
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@iceberg.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@iceberg.apache.org
For additional commands, e-mail: issues-help@iceberg.apache.org
Re: [I] Add Hashicorp Vault as encryption client [iceberg]
Posted by "github-actions[bot] (via GitHub)" <gi...@apache.org>.
github-actions[bot] commented on issue #14437:
URL: https://github.com/apache/iceberg/issues/14437#issuecomment-4436017314
This issue has been closed because it has not received any activity in the last 14 days since being marked as 'stale'
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@iceberg.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@iceberg.apache.org
For additional commands, e-mail: issues-help@iceberg.apache.org
Re: [I] Add Hashicorp Vault as encryption client [iceberg]
Posted by "nandorKollar (via GitHub)" <gi...@apache.org>.
nandorKollar commented on issue #14437:
URL: https://github.com/apache/iceberg/issues/14437#issuecomment-3463003641
Actually KMS clients are implemented inside Iceberg, at least those, which connect encryption keys with cloud provider specific KMS implementations. The clients within Iceberg implement the [KeyManagementClient](https://github.com/apache/iceberg/blob/main/core/src/main/java/org/apache/iceberg/encryption/KeyManagementClient.java) interface, [GCP](https://github.com/apache/iceberg/blob/main/gcp/src/main/java/org/apache/iceberg/gcp/GcpKeyManagementClient.java) and [AWS](https://github.com/apache/iceberg/blob/main/aws/src/main/java/org/apache/iceberg/aws/AwsKeyManagementClient.java) already has an implementation. Did you also implement the aforementioned interface for HashiCorp vault?
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@iceberg.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@iceberg.apache.org
For additional commands, e-mail: issues-help@iceberg.apache.org
Re: [I] Add Hashicorp Vault as encryption client [iceberg]
Posted by "mrendi29 (via GitHub)" <gi...@apache.org>.
mrendi29 commented on issue #14437:
URL: https://github.com/apache/iceberg/issues/14437#issuecomment-3463125099
@nandorKollar yes we have implemented an initial version of Hashicorp Vault KMS implementation using Transit Engine and authenticating to Vault with App Role. (I used Iceberg 1.10 and cherry picked the encryption commits)
I would be more than happy to contribute this back to the community.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@iceberg.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@iceberg.apache.org
For additional commands, e-mail: issues-help@iceberg.apache.org