Skip to content

feat: Automatic Vended Credential Refresh #3506

@gabeiglio

Description

@gabeiglio

Feature Request / Improvement

Today, long-running writes to PyIceberg risk failing when credentials expire mid-transaction. The Java implementation addressed this by adding a vended-credential refresh mechanism that calls a REST catalog endpoint to obtain new credentials whenever the current ones are within five minutes of expiring.

I propose a similar approach for PyIceberg, delivered in three separate PRs:

  1. VendedCredential class implementation (largest diff) -> PR ready for review
  2. Credential refresh support in PyArrowFileIO -> PR pending review and merge of 1
  3. Credential refresh support in FsspecFileIO -> PR pending review and merge of 1

PRs 2 and 3 depend on PR 1, which provides the core vended-credential implementation.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions