Peter Rozsa created IMPALA-15480:
------------------------------------
Summary: Refresh vended credentials via the REST catalog's
/credentials endpoint instead of a full loadTable
Key: IMPALA-15480
URL: https://issues.apache.org/jira/browse/IMPALA-15480
Project: IMPALA
Issue Type: Sub-task
Components: Frontend
Reporter: Peter Rozsa
Assignee: Peter Rozsa
IMPALA-15147 added credential refresh for Iceberg REST catalog tables: when a
vended storage credential is near expiry, the executor asks the coordinator for
fresh credentials ({{{}ControlService::FetchCredentials{}}}), and
{{IcebergMetaProvider.fetchCredentials()}} obtains them by issuing a full REST
{{loadTable}} and reading the {{storage-credentials}} of the response.
A full table load is more than a refresh needs: it fetches and parses the
complete table metadata (and may populate caches) just to get a new token. The
Iceberg REST spec has a dedicated endpoint for exactly this case:
{{GET /v1/\{prefix}/namespaces/\{namespace}/tables/\{table}/credentials}}
({{{}loadCredentials{}}}, returns {{storage-credentials}} only)
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
