Congrats on the release and thanks JB for driving it. Thanks, Yufei
On Sun, Aug 2, 2026 at 6:53 AM Jean-Baptiste Onofré <[email protected]> wrote: > Hi, > > The Apache Polaris team is pleased to announce Apache Polaris 1.7.0! > > Apache Polaris is an open-source, fully-featured catalog for Apache > Iceberg™. It implements Iceberg's REST API, enabling seamless > multi-engine interoperability across a wide range of platforms, > including Apache Doris™, Apache Flink®, Apache Spark™, Dremio®, > StarRocks, and Trino. > > This release includes several fixes and improvements, especially: > - Added Kafka PolarisEventListener for publishing events to Kafka. > - Added GCS principal attribution for vended credentials (the GCP > counterpart of AWS STS session tags). Set > GCS_PRINCIPAL_ATTRIBUTION_ENABLED=true to activate; the feature > flags GCS_PRINCIPAL_ATTRIBUTION_WIF_AUDIENCE, > GCS_PRINCIPAL_ATTRIBUTION_TOKEN_ISSUER, and > GCS_PRINCIPAL_ATTRIBUTION_SIGNING_KEY_FILE are then required (a > missing value is a fatal configuration error). Also requires a > gcpServiceAccount on the catalog StorageConfiguration. When enabled, > credential vending chains a catalog-signed JWT through a Workload > Identity Federation token exchange and service-account impersonation, > so the Polaris principal appears in GCS Data Access audit logs > (serviceAccountDelegationInfo.principalSubject) for any client. > GCS_PRINCIPAL_ATTRIBUTION_SIGNING_KEY_ID sets the JWT kid for JWKS key > rotation. Attribution is keyed per-principal in the credential > cache; when disabled (default), GCP vending behaviour is unchanged. > - Added the DEFAULT_UNIQUE_TABLE_LOCATION_ENABLED feature flag (off by > default). When enabled, a managed location generated for a table or > view created without an explicit location is given a unique, > unpredictable suffix, so that no two tables share a path prefix. > - Added the ALLOW_CLIENT_SPECIFIED_TABLE_LOCATION feature flag (on by > default). When set to false, a caller-specified location (the > location field, a SetLocation update, or the write.data.path / > write.metadata.path properties) on a create-table (including a staged > create- table request), create-view, update-table, replace-view, or > commit-transaction request is rejected, forcing Polaris to manage > all locations. Federated catalogs, committing an already staged > create, and register table / register view are unaffected. > - Added maintenance support in Helm chart. > - Python CLI: added --catalog-url to specify a custom base URL for the > Iceberg REST Catalog (IRC) API. Allows use with deployments that map > a path (e.g. /server1) directly to the catalog root instead of the > standard /api/catalog. See #4927. > Added support for publishing histogram buckets for HTTP server > request duration as configured SLO boundaries. > - Added an OpenTelemetry event listener for emitting Polaris audit > events as OpenTelemetry log records. > > This release can be downloaded here: > https://www.apache.org/dyn/closer.cgi/polaris/apache-polaris-1.7.0. > You can find more details about this release here: > https://polaris.apache.org/downloads/1.7.0/ > > Artifacts are available on Maven Central. > > Enjoy ! >
