Skip to content

Destination S3 Data Lake: avoid System.setProperty in assume role mode - #50971

Merged
Edward Gao (edgao) merged 12 commits into
masterfrom
edgao/derp
Jan 10, 2025
Merged

Edward Gao (edgao) merged 12 commits into
masterfrom
edgao/derp

Conversation

@edgao

@edgao Edward Gao (edgao) commented Jan 7, 2025 •

Copy link
Copy Markdown
Contributor

DefaultS3FileIOAwsClientFactory calls s3FileIOProperties.applyCredentialConfigurations, which calls awsClientProperties.credentialsProvider, which prioritizes the accessKey property over AwsClientProperties.CLIENT_CREDENTIALS_PROVIDER.

so stop setting that property entirely in assume role mode. Also make our creds provider a bit better.

(also, kill the region system property, which means we're now doing everything via the iceberg props 🎉 )

@vercel

vercel Bot commented Jan 7, 2025 •

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name Status Preview Comments Updated (UTC)
airbyte-docs ✅ Ready (Inspect) Visit Preview 💬 Add feedback Jan 10, 2025 4:32pm

@edgao Edward Gao (edgao) changed the title derp Destination S3 Data Lake: avoid System.setProperty in assume role mode Jan 9, 2025
@edgao

Copy link
Copy Markdown
Contributor Author

fyi I pushed 3cd2c47, which seems to work? It kills the System.setProperty(region) thing, which was actually causing transient test failures (b/c our tests are hitting buckets in different regions, so this was transiently causing tests to try and use the wrong region)

it works locally on the tests I spot-checked 🤷

(cc Subodh Chaturvedi (@subodh1810) since you ran into the problem originally - is there some other problem I'm missing?)

@edgao
Edward Gao (edgao) marked this pull request as ready for review January 9, 2025 21:26
@edgao
Edward Gao (edgao) requested a review from a team as a code owner January 9, 2025 21:26
AwsProperties.CLIENT_ASSUME_ROLE_EXTERNAL_ID to externalId,
AwsClientProperties.CLIENT_CREDENTIALS_PROVIDER to
GlueCredentialsProvider::class.java.name,
"${AwsClientProperties.CLIENT_CREDENTIALS_PROVIDER}.$AWS_CREDENTIALS_MODE" to

@frifriSF59 Francis Genet (frifriSF59) Jan 9, 2025 •

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The fact that this is the expected way of handling those scenarios is blowing my mind.

@octavia-squidington-iii Octavia Squidington III (octavia-squidington-iii) added the area/documentation Improvements or additions to documentation label Jan 9, 2025

This branch was successfully deployed

1 active deployment
Preview — 3e03d6b0 Deployed Jan 10, 2025 by vercel[bot]
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

area/connectors Connector related issues area/documentation Improvements or additions to documentation CDK Connector Development Kit connectors/destination/iceberg-v2 connectors/destination/s3-data-lake

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants