szlta commented on code in PR #17155:
URL: https://github.com/apache/iceberg/pull/17155#discussion_r4273174553
##########
open-api/rest-catalog-open-api.yaml:
##########
@@ -4169,6 +4217,10 @@ components:
type: array
items:
$ref: '#/components/schemas/StorageCredential'
+ key-management-credentials:
Review Comment:
Good catch. I lean toward loadCredentials accepting the same
X-Iceberg-Access-Delegation header too, so clients can express the same
delegation choices during refresh.
Considering the other topics we’re discussing:
- If hybrid mode is allowed through explicit configuration, clients may want
to refresh storage credentials while continuing to use local KMS credentials.
- When the server returns a KMS credential, the client must use it over a
locally configured one.
=> This suggests clients should be able to choose whether to request KMS
credential vending on loadCredentials too. WDYT?
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
