visit2rahul opened a new pull request, #5129:
URL: https://github.com/apache/polaris/pull/5129
Closes #2046
The cache currently evicts credentials after half their remaining
lifetime. That works, but there's no way to tune it -- if your storage
provider returns short-lived tokens, you can end up serving credentials
that are nearly expired by the time the client uses them.
This adds STORAGE_CREDENTIAL_REFRESH_BUFFER_SECONDS (default 0). When
set to a positive value, credentials are evicted from the cache once
their remaining validity drops below that threshold. With the default of
0, behavior is unchanged -- the cache still uses the half-lifetime
approach.
Changes:
- New FeatureConfiguration constant with a clear description and a safe
default
- StorageCredentialCacheEntry carries the buffer alongside
maxCacheDurationMs so the Caffeine expiry function can use both
- Two new unit tests: one verifying near-expiry credentials are evicted
with a 300s buffer, one confirming the zero-buffer path preserves the
existing behavior
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
