Just a heads up, but I believe this PR
<https://github.com/apache/iceberg/pull/11504> (
https://github.com/apache/iceberg/pull/11504) that was added to the 1.7.1
introduced a breaking change for anyone previously supporting ADLSFileIO /
credentials with sasTokens. I added some details in the PR comments, but
will also provide those details here as well since the PR is closed.

On initialization of ADLSFileIO, AzureProperties is created and builds a
map of account -> sasToken here when you create ADLSFileIO using
adls.sas-token. as the credential mechanism.

Prior to this change, the account passed in here
<https://github.com/apache/iceberg/blob/main/azure/src/main/java/org/apache/iceberg/azure/AzureProperties.java#L91>
(which
is used to lookup the sasToken from the map mentioned above) was parsed to
include .dfs.core.windows.net so when generating the adls.sas-token. property
to pass into ADLSFileIO, you needed to include .dfs.core.windows.net as
part of the adls.sas-token. property name. After this change, we are
parsing the ADLSLocation account to NOT include adls.sas-token., so now the
sasToken lookup from the map doesn't find the sasToken. When someone
updates to 1.7.1, they will/would also need to update how they are
configuring / building the ADLSFileIO properties when using sasTokens.


-alex

Reply via email to