plusplusjiajia opened a new pull request, #118:
URL: https://github.com/apache/terraform-provider-iceberg/pull/118
## What
Adds optional AWS SigV4 request signing to the provider, for Iceberg REST
catalogs that authenticate requests with SigV4 (for example AWS Glue) rather
than a bearer token.
## Why
Today the provider can only send an OAuth bearer `token` or static
`headers`. Catalogs that require SigV4 have no way to be configured, so they
cannot be used at all.
## Changes
New optional provider attributes:
| Attribute | Purpose |
| --- | --- |
| `sigv4_enabled` | Turn on SigV4 signing |
| `sigv4_region` | Signing region |
| `sigv4_signing_name` | Credential-scope service name; defaults to
`execute-api`, use `glue` for AWS Glue |
| `sigv4_access_key_id` / `sigv4_secret_access_key` /
`sigv4_session_token` | Static credentials; when omitted the standard AWS
credential chain is used |
These are wired into `iceberg-go`'s `rest.WithSigV4RegionSvc` and, when
static credentials are supplied, `rest.WithAwsConfig`. `docs/index.md`
documents the attributes and shows a Glue example. `aws-sdk-go-v2` and
`aws-sdk-go-v2/credentials` move from indirect to direct dependencies.
The change is backward compatible: all attributes are optional and, with
`sigv4_enabled` unset, request behavior is unchanged.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
