You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
| catalog.iceberg.configDefaults | object |`{}`| Iceberg config defaults applicable to all clients and warehouses. Any properties that are common to all iceberg clients should be included here. They will be passed to all clients on all warehouses as config defaults. These defaults can be overridden on a per-warehouse basis, see below. |
| catalog.iceberg.warehouses[0].configDefaults | object |`{}`| Iceberg config defaults specific to this warehouse. They override any defaults specified above in catalog.iceberg.configDefaults. |
91
91
| catalog.iceberg.warehouses[0].configOverrides | object |`{}`| Iceberg config overrides specific to this warehouse. They override any defaults specified above in catalog.iceberg.configOverrides. |
92
92
| catalog.iceberg.warehouses[0].location | string |`nil`| Location of the warehouse. Required. Used to determine the base location of a table. Scheme must be either s3 (Amazon S3), gs (Google GCS) or abfs / abfss (Azure ADLS). Storage properties for each location can be defined below. |
| catalog.storage.adls.advancedConfig | object |`{}`| Custom ADLS configuration options, see javadocs of com.azure.core.util.Configuration. Not overridable on a per-filesystem basis. |
95
95
| catalog.storage.adls.defaultOptions.accountSecret | object |`{"accountKey":null,"accountName":null,"name":null}`| A secret containing the account name and key to use. Either this option or sasTokenSecret must be set. If both are set, sasTokenSecret takes precedence. |
| catalog.storage.gcs.transport.rpcTimeoutMultiplier | string |`nil`| Override the default RPC timeout multiplier. Must be a valid ISO duration. |
146
146
| catalog.storage.gcs.transport.totalTimeout | string |`nil`| Override the default total timeout. Must be a valid ISO duration. |
147
147
| catalog.storage.s3.buckets | list |`[]`| Per-bucket S3 settings. Override the general settings above. |
148
-
| catalog.storage.s3.defaultOptions.accessKeySecret | object |`{"awsAccessKeyId":null,"awsSecretAccessKey":null,"name":null}`| AWS credentials. For STS, this defines the Access Key ID and Secret Key ID to be used as a basic credential for obtaining temporary session credentials. |
148
+
| catalog.storage.s3.defaultOptions.accessKeySecret | object |`{"awsAccessKeyId":null,"awsSecretAccessKey":null,"name":null}`| AWS credentials. Required when serverAuthenticationMode is STATIC. |
149
149
| catalog.storage.s3.defaultOptions.accessKeySecret.awsAccessKeyId | string |`nil`| The secret key storing the AWS secret key id. |
150
150
| catalog.storage.s3.defaultOptions.accessKeySecret.awsSecretAccessKey | string |`nil`| The secret key storing the AWS secret access key. |
151
-
| catalog.storage.s3.defaultOptions.accessKeySecret.name | string |`nil`| The secret name to pull AWS credentials from. Optional; if not present, the default AWS credentials provider chain is used. |
151
+
| catalog.storage.s3.defaultOptions.accessKeySecret.name | string |`nil`| The secret name to pull AWS credentials from. |
152
152
| catalog.storage.s3.defaultOptions.accessPoint | string |`nil`| AWS Access point for this bucket. Access points can be used to perform S3 operations by specifying a mapping of bucket to access points. This is useful for multi-region access, cross-region access, disaster recovery, etc. See https://docs.aws.amazon.com/AmazonS3/latest/userguide/using-access-points.html.|
153
153
| catalog.storage.s3.defaultOptions.allowCrossRegionAccessPoint | bool |`false`| Authorize cross-region calls when contacting an access point. The default is false. |
154
154
| catalog.storage.s3.defaultOptions.assumeRole | object |`{"clientSessionDuration":null,"externalId":null,"roleArn":null,"roleSessionName":null,"sessionIamPolicy":null,"stsEndpoint":null}`| Settings only relevant when clientAuthenticationMode is ASSUME_ROLE. |
| catalog.storage.s3.defaultOptions.externalEndpoint | string |`nil`| Endpoint URI, required for private clouds. Optional; if not provided, the default is used. If the endpoint URIs for the Nessie server and clients differ, this one defines the endpoint used for the Nessie server. |
164
164
| catalog.storage.s3.defaultOptions.pathStyleAccess | bool |`false`| Whether to use path-style access. Optional; if not provided, the default is used. If true, path-style access will be used, as in: https://<domain>/<bucket>. If false, a virtual-hosted style will be used instead, as in: https://<bucket>.<domain>. |
165
165
| catalog.storage.s3.defaultOptions.region | string |`nil`| DNS name of the region, required for AWS. |
166
+
| catalog.storage.s3.defaultOptions.serverAuthenticationMode | string |`nil`| Controls the authentication mode for the Catalog server. Valid values are: - APPLICATION_GLOBAL: Use the default AWS credentials provider chain. - STATIC: Static credentials provided through the accessKeySecret option. The default is STATIC. |
166
167
| catalog.storage.s3.sessionCredentials.sessionCredentialCacheMaxEntries | string |`nil`| Maximum number of entries to keep in the session credentials cache (assumed role credentials). Not overridable on a per-bucket basis. The default is 1000. |
167
168
| catalog.storage.s3.sessionCredentials.sessionCredentialRefreshGracePeriod | string |`nil`| The time period to subtract from the S3 session credentials (assumed role credentials) expiry time to define the time when those credentials become eligible for refreshing. Not overridable on a per-bucket basis. The default is PT5M (5 minutes). |
168
169
| catalog.storage.s3.sessionCredentials.stsClientsCacheMaxEntries | string |`nil`| Maximum number of entries to keep in the STS clients cache. Not overridable on a per-bucket basis. The default is 50. |
0 commit comments