You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: modules/manage/partials/iceberg/use-iceberg-catalogs.adoc
+13-7Lines changed: 13 additions & 7 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -33,19 +33,25 @@ Redpanda uses the bearer token unconditionally and does not attempt to refresh t
33
33
34
34
For REST catalogs that use self-signed certificates, also configure these properties:
35
35
36
-
* config_ref:iceberg_rest_catalog_trust_file,true,properties/cluster-properties[`iceberg_rest_catalog_trust_file`]: The path to a file containing a certificate chain to trust for the REST catalog.
37
-
* config_ref:iceberg_rest_catalog_crl_file,true,properties/cluster-properties[`iceberg_rest_catalog_crl_file`]: The path to the certificate revocation list for the specified trust file.
36
+
* config_ref:iceberg_rest_catalog_trust,true,properties/cluster-properties[`iceberg_rest_catalog_trust`]: The contents of a certificate chain to trust for the REST catalog.
37
+
ifndef::env-cloud[]
38
+
** Or, use config_ref:iceberg_rest_catalog_trust_file,true,properties/cluster-properties[`iceberg_rest_catalog_trust_file`] to specify the path to the certificate chain file.
39
+
endif::[]
40
+
* config_ref:iceberg_rest_catalog_crl,true,properties/cluster-properties[`iceberg_rest_catalog_crl`]: The contents of a certificate revocation list for `iceberg_rest_catalog_trust`.
41
+
ifndef::env-cloud[]
42
+
** Or, use config_ref:iceberg_rest_catalog_crl_file,true,properties/cluster-properties[`iceberg_rest_catalog_crl_file`] to specify the path to the certificate revocation list file.
43
+
endif::[]
38
44
39
45
See xref:reference:properties/cluster-properties.adoc[Cluster Configuration Properties] for the full list of cluster properties to configure for a catalog integration.
40
46
41
47
ifdef::env-cloud[]
42
48
=== Store a secret for REST catalog authentication
43
49
44
-
To store a secret that you can reference in your catalog authentication cluster properties, you must create the secret using `rpk` or the Cloud API. Secrets are stored in the secret management solution of your cloud provider. Redpanda retrieves the secrets at runtime.
50
+
To store a secret that you can reference in your catalog authentication cluster properties, you must create the secret using `rpk` or the Data Plane API. Secrets are stored in the secret management solution of your cloud provider. Redpanda retrieves the secrets at runtime.
45
51
46
52
To learn more about `rpk` and the Cloud API, see xref:manage:rpk/intro-to-rpk.adoc[] and xref:manage:api/cloud-api-overview.adoc[].
47
53
48
-
Store secrets for the following properties:
54
+
If you need to configure any of the following properties, you must set their values using secrets:
49
55
50
56
* `iceberg_rest_catalog_client_secret`
51
57
* `iceberg_rest_catalog_crl`
@@ -91,7 +97,7 @@ You must include the following values:
91
97
- This scope: `"SCOPE_REDPANDA_CLUSTER"`.
92
98
93
99
+
94
-
The response returns the name of the secret and the scope `"SCOPE_REDPANDA_CLUSTER"`.
100
+
The response returns the name and scope of the secret.
95
101
96
102
You can now <<use-a-secret-in-cluster-configuration,reference the secret in your cluster configuration>>.
97
103
@@ -100,7 +106,7 @@ You can now <<use-a-secret-in-cluster-configuration,reference the secret in your
100
106
101
107
=== Use a secret in cluster configuration
102
108
103
-
To set the cluster property to use the value of the secret, use `rpk` or the Cloud API.
109
+
To set the cluster property to use the value of the secret, use `rpk` or the Control Plane API.
104
110
105
111
For example, to use a secret for the `iceberg_rest_catalog_client_secret` property, run the following:
106
112
@@ -111,7 +117,7 @@ rpk::
111
117
--
112
118
[,bash]
113
119
----
114
-
rpk cluster config set iceberg_rest_catalog_client_secret <secret-name>
120
+
rpk cluster config set iceberg_rest_catalog_client_secret ${secrets.<secret-name>}
0 commit comments