Re: [I] configurable request signing for AWS S3 [arrow-rs-object-store]

2025-06-10 Thread via GitHub


gruuya commented on issue #318:
URL: 
https://github.com/apache/arrow-rs-object-store/issues/318#issuecomment-2958372957

   > As for a more holistic refactor, I think we'd want to collect a bit more 
information on the various different use-cases first
   
   One such use case is when employing [remote-signing for Iceberg 
catalogs](https://github.com/apache/iceberg/blob/main/aws/src/main/resources/s3-signer-open-api.yaml).
   
   When one loads a table from an Iceberg catalog with vended-credentials 
access delegation, [the response is 
sufficient](https://github.com/JanKaul/iceberg-rust/blob/main/iceberg-rust/src/object_store/parse.rs)
 to construct an `ObjectStore` instance, and thus perform some read/write 
actions on the table.
   
   This isn't the case for remote-signing access delegation, as there's no way 
to hook-up the `s3.signer.uri` and `s3.signer.endpoint`  [that are 
returned](https://github.com/lakekeeper/lakekeeper/blob/0ee94b265d4ad5c53e14dac09ccb3f4cdb270a77/crates/lakekeeper/src/service/storage/s3.rs#L542-L548)
 so that the `S3Client` uses them to presign the request URL.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: github-unsubscr...@arrow.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



Re: [I] configurable request signing for AWS S3 [arrow-rs-object-store]

2025-04-02 Thread via GitHub


tustvold commented on issue #318:
URL: 
https://github.com/apache/arrow-rs-object-store/issues/318#issuecomment-2773059222

   I don't see an issue with making the token_header configurable, as you say 
it is already largely plumbed in to allow for S3 Express. 
   
   As for a more holistic refactor, I think we'd want to collect a bit more 
information on the various different use-cases first


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: github-unsubscr...@arrow.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org