Hi, The Apache Polaris team is pleased to announce Apache Polaris 1.7.0!
Apache Polaris is an open-source, fully-featured catalog for Apache Iceberg™. It implements Iceberg's REST API, enabling seamless multi-engine interoperability across a wide range of platforms, including Apache Doris™, Apache Flink®, Apache Spark™, Dremio®, StarRocks, and Trino. This release includes several fixes and improvements, especially: - Added Kafka PolarisEventListener for publishing events to Kafka. - Added GCS principal attribution for vended credentials (the GCP counterpart of AWS STS session tags). Set GCS_PRINCIPAL_ATTRIBUTION_ENABLED=true to activate; the feature flags GCS_PRINCIPAL_ATTRIBUTION_WIF_AUDIENCE, GCS_PRINCIPAL_ATTRIBUTION_TOKEN_ISSUER, and GCS_PRINCIPAL_ATTRIBUTION_SIGNING_KEY_FILE are then required (a missing value is a fatal configuration error). Also requires a gcpServiceAccount on the catalog StorageConfiguration. When enabled, credential vending chains a catalog-signed JWT through a Workload Identity Federation token exchange and service-account impersonation, so the Polaris principal appears in GCS Data Access audit logs (serviceAccountDelegationInfo.principalSubject) for any client. GCS_PRINCIPAL_ATTRIBUTION_SIGNING_KEY_ID sets the JWT kid for JWKS key rotation. Attribution is keyed per-principal in the credential cache; when disabled (default), GCP vending behaviour is unchanged. - Added the DEFAULT_UNIQUE_TABLE_LOCATION_ENABLED feature flag (off by default). When enabled, a managed location generated for a table or view created without an explicit location is given a unique, unpredictable suffix, so that no two tables share a path prefix. - Added the ALLOW_CLIENT_SPECIFIED_TABLE_LOCATION feature flag (on by default). When set to false, a caller-specified location (the location field, a SetLocation update, or the write.data.path / write.metadata.path properties) on a create-table (including a staged create- table request), create-view, update-table, replace-view, or commit-transaction request is rejected, forcing Polaris to manage all locations. Federated catalogs, committing an already staged create, and register table / register view are unaffected. - Added maintenance support in Helm chart. - Python CLI: added --catalog-url to specify a custom base URL for the Iceberg REST Catalog (IRC) API. Allows use with deployments that map a path (e.g. /server1) directly to the catalog root instead of the standard /api/catalog. See #4927. Added support for publishing histogram buckets for HTTP server request duration as configured SLO boundaries. - Added an OpenTelemetry event listener for emitting Polaris audit events as OpenTelemetry log records. This release can be downloaded here: https://www.apache.org/dyn/closer.cgi/polaris/apache-polaris-1.7.0. You can find more details about this release here: https://polaris.apache.org/downloads/1.7.0/ Artifacts are available on Maven Central. Enjoy !
