[
https://issues.apache.org/jira/browse/IMPALA-14018?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=18019010#comment-18019010
]
ASF subversion and git services commented on IMPALA-14018:
----------------------------------------------------------
Commit 062ba4071a2d3e82ed33827edb64e12c9630b955 in impala's branch
refs/heads/master from Zoltan Borok-Nagy
[ https://gitbox.apache.org/repos/asf?p=impala.git;h=062ba4071 ]
IMPALA-14018: Configure OAUTH2 with Lakekeeper and fix Impala's config handling
This patch adds Keycloak as Identity Provider for Lakekeeper, so
now we can test Impala's Iceberg REST Catalog with an OAuth2
authentication (Client-Credential) flow. The Keycloak
instance is pre-configured with a Lakekeeper realm that contain
the necessary clients, users, scopes and roles.
Manual testing also revealed that our Iceberg REST Catalog
configuration is incomplete. This patch refactors config
handling in a way that both Iceberg native configuration
options and Trino-specific configuration options can be
used with Impala. This will help users use their Trino
connectors with Impala.
By default Impala uses Iceberg 1.3 which assumes that the
Iceberg REST server is also the authentication server. It is
not always true, e.g. Lakekeeper cannot even function as the
authententication server, but it can work with external authentication
servers. Btw, this is why we needed Keycloak in the first place.
It means if someone wants to try out Lakekeeper+Impala with Oauth2,
they need to configure Impala with Iceberg 1.5.
Testing
* manual testing with Iceberg 1.5
Change-Id: Ie5785cb72773e188b1de7c7924cc6f0b1f96de33
(cherry picked from commit a9cb94986a5791be2adcb2f7c576272a9c22e79c)
Reviewed-on: http://gerrit.cloudera.org:8080/23156
Reviewed-by: Impala Public Jenkins <[email protected]>
Tested-by: Impala Public Jenkins <[email protected]>
> Test Impala against Lakekeeper
> ------------------------------
>
> Key: IMPALA-14018
> URL: https://issues.apache.org/jira/browse/IMPALA-14018
> Project: IMPALA
> Issue Type: Improvement
> Components: Infrastructure, Test
> Reporter: Zoltán Borók-Nagy
> Assignee: Zoltán Borók-Nagy
> Priority: Major
> Labels: impala-iceberg
>
> Now that Lakekeeper supports HDFS, we could integrate it into our test
> environment, so we could have tests against a real Iceberg REST server, not
> just against our stub.
> https://github.com/lakekeeper/lakekeeper/blob/ct/hdfs/docs/docs/storage.md#hdfs-storage
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
