adutra commented on code in PR #2877: URL: https://github.com/apache/polaris/pull/2877#discussion_r2459628459
########## site/content/downloads/_index.md: ########## @@ -30,6 +30,46 @@ params: ## Helm Chart Repo: https://downloads.apache.org/incubator/polaris/helm-chart +## 1.2.0 +| Artifact | PGP Sig | SHA-512 | +|--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|----------------------------------------------------------------------------------------------------------------------------------------------------------|----------------------------------------------------------------------------------------------------------------------------------------------------------------| +| [source tar.gz](https://dlcdn.apache.org/incubator/polaris/1.2.0-incubating/apache-polaris-1.2.0-incubating.tar.gz) | [.asc](https://downloads.apache.org/incubator/polaris/1.2.0-incubating/apache-polaris-1.2.0-incubating.tar.gz.asc) | [.sha512](https://downloads.apache.org/incubator/polaris/1.2.0-incubating/apache-polaris-1.2.0-incubating.tar.gz.sha512) | +| [binary tgz](https://dlcdn.apache.org/incubator/polaris/1.2.0-incubating/polaris-bin-1.2.0-incubating.tgz) | [.asc](https://downloads.apache.org/incubator/polaris/1.2.0-incubating/polaris-bin-1.2.0-incubating.tgz.asc) | [.sha512](https://downloads.apache.org/incubator/polaris/1.2.0-incubating/polaris-bin-1.2.0-incubating.tgz.sha512) | +| [binary zip](https://dlcdn.apache.org/incubator/polaris/1.2.0-incubating/polaris-bin-1.2.0-incubating.zip) | [.asc](https://downloads.apache.org/incubator/polaris/1.2.0-incubating/polaris-bin-1.2.0-incubating.zip.asc) | [.sha512](https://downloads.apache.org/incubator/polaris/1.2.0-incubating/polaris-bin-1.2.0-incubating.zip.sha512) | +| [Spark 3.5 with Scala 2.12 Client Jar](https://repo1.maven.org/maven2/org/apache/polaris/polaris-spark-3.5_2.12/1.2.0-incubating/polaris-spark-3.5_2.12-1.2.0-incubating-bundle.jar) | [.asc](https://repo1.maven.org/maven2/org/apache/polaris/polaris-spark-3.5_2.12/1.2.0-incubating/polaris-spark-3.5_2.12-1.2.0-incubating-bundle.jar.asc) | [.sha512](https://repo1.maven.org/maven2/org/apache/polaris/polaris-spark-3.5_2.12/1.2.0-incubating/polaris-spark-3.5_2.12-1.2.0-incubating-bundle.jar.sha512) | +| [Spark 3.5 with Scala 2.13 Client Jar](https://repo1.maven.org/maven2/org/apache/polaris/polaris-spark-3.5_2.13/1.2.0-incubating/polaris-spark-3.5_2.13-1.2.0-incubating-bundle.jar) | [.asc](https://repo1.maven.org/maven2/org/apache/polaris/polaris-spark-3.5_2.13/1.2.0-incubating/polaris-spark-3.5_2.13-1.2.0-incubating-bundle.jar.asc) | [.sha512](https://repo1.maven.org/maven2/org/apache/polaris/polaris-spark-3.5_2.13/1.2.0-incubating/polaris-spark-3.5_2.13-1.2.0-incubating-bundle.jar.sha512) | +Apache Polaris 1.2.0-incubating was released on October 23rd, 2025. +- **Upgrade Notes** + - Amazon RDS plugin enabled, this allows polaris to connect to AWS Aurora PostgreSQL using IAM authentication. + +- **Breaking changes** + - Creating or altering a namespace with a custom location outside its parent location is now prohibited by default. To restore the old behavior, set the `ALLOW_NAMESPACE_CUSTOM_LOCATION` flag to true. + +- **New Features** + - Added a finer grained authorization model for UpdateTable requests. Existing privileges continue to work for granting UpdateTable, such as `TABLE_WRITE_PROPERTIES`. + However, you can now instead grant privileges just for specific operations, such as `TABLE_ADD_SNAPSHOT` + - Added a Management API endpoint to reset principal credentials, controlled by the `ENABLE_CREDENTIAL_RESET` (default: true) feature flag. + - The `ENABLE_SUB_CATALOG_RBAC_FOR_FEDERATED_CATALOGS` was added to support sub-catalog (initially namespace and table) RBAC for federated catalogs. + The setting can be configured on a per-catalog basis by setting the catalog property: `polaris.config.enable-sub-catalog-rbac-for-federated-catalogs`. + The realm-level feature flag `ALLOW_SETTING_SUB_CATALOG_RBAC_FOR_FEDERATED_CATALOGS` (default: true) controls whether this functionality can be enabled or modified at the catalog level. + - Added support for S3-compatible storage that does not have STS (use `stsUavailable: true` in catalog storage configuration) + - Added a Management API endpoint to reset principal credentials, controlled by the `ENABLE_CREDENTIAL_RESET` (default: true) feature flag. + - Added AWS CloudWatch Event Sink Implementation Review Comment: I also support flagging events as beta. For a few reasons: - The API is still evolving, see this ML thread: https://lists.apache.org/thread/rl5cpcft16sn5n00mfkmx9ldn3gsqtfy - As the ML thread linked above shows, the SQL schema of the events table could evolve and require SQL migration. - Existing listeners are both incomplete: * JDBC: only processes `after-create-table`, `after-create-catalog` events, other events are ignored. * CloudWatch: only processes `after-refresh-table` events, other events are ignored. As I already suggested a few times, a complete, general-purpose, production-ready event listener _must either process all events equally, or expose a configuration option to select which events to process or ignore_. See #2630 and https://github.com/apache/polaris/pull/2836#discussion_r2448079987 for more discussions on this specific topic. For all the above reasons, I think it would be nicer for our users to mark the events feature as beta/experimental, so that they don't accidentally rely on it prematurely in production-critical deployments. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
