guitcastro opened a new issue, #1028:
URL: https://github.com/apache/iceberg-python/issues/1028
### Apache Iceberg version
main (development)
### Please describe the bug 🐞
Nessie s3 signer use a different endpoint than `/aws/s3/sign` and also
includes query parameters in the URI. Therefore, we need to honor their
`s3.signer.endpoint` which is currently static in code.
Additionally, we need to parameterize the X-Iceberg-Access-Delegation, which
currently has the value vended-credentials hardcoded. This is necessary because
Nessie does not return the `s3.signer.endpoint` when the value is set to
`vended-credentials`.
An example of Nessie config from get table endpoint:
```
"config": {
"s3.path-style-access": "true",
"s3.signer.uri": "http://127.0.0.1:19120/iceberg/";,
"s3.endpoint": "http://minio:9000/";,
"io-impl": "org.apache.iceberg.aws.s3.S3FileIO",
"s3.signer.endpoint":
"v1/main/s3-sign/default.datasets?e=1723099768&b=s3%3A%2F%2Fwarehouse&k=f1379b71-f73a-4fcd-8765-4a1aba6a3585&s=22f3f6b52d586c3b9b310eb2df0e2e51d0c8d0b03030f5bb25f8b2548ef406da&w=s3%3A%2F%2Fwarehouse%2Fdefault%2Fdatasets_f244e57f-143a-4e19-b1c6-591cafbe96fe",
"s3.remote-signing-enabled": "true",
"client.region": "us-east-1"
}
```
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
