Skip to content

Antalya-26.6: Datalake catalog auth token profile events - #2222

Open
ianton-ru wants to merge 6 commits into
antalya-26.6from
feature/antalya-26.6/datalake-catalog-auth-token-profile-events
Open

Antalya-26.6: Datalake catalog auth token profile events#2222
ianton-ru wants to merge 6 commits into
antalya-26.6from
feature/antalya-26.6/datalake-catalog-auth-token-profile-events

Conversation

@ianton-ru

Copy link
Copy Markdown

Rebase on #2010

Changelog category (leave one):

  • Improvement

Changelog entry (a user-readable short description of the changes that goes to CHANGELOG.md):

Datalake catalog auth token profile events

Documentation entry for user-facing changes

New profile events for requests to catalog token, REST only.

CI/CD Options

Exclude tests:

  • Fast test
  • Integration Tests
  • Stateless tests
  • Stateful tests
  • Performance tests
  • Aarch64 tests
  • All with ASAN
  • All with TSAN
  • All with MSAN
  • All with UBSAN
  • All with Coverage
  • All Regression
  • Disable CI Cache

Regression jobs to run:

  • Fast suites (mostly <1h)
  • Aggregate Functions (2h)
  • Alter (1.5h)
  • Benchmark (30m)
  • ClickHouse Keeper (1h)
  • Iceberg (2h)
  • LDAP (1h)
  • OAuth (5m)
  • Parquet (1.5h)
  • RBAC (1.5h)
  • SSL Server (1h)
  • S3 (2h)
  • S3 Export (2h)
  • Swarms (30m)
  • Tiered Storage (2h)

ianton-ru and others added 6 commits August 17, 2026 15:06
Track how often REST-family catalogs reuse cached OAuth/GCP tokens versus
fetching new ones or retrying after HTTP 401/403, and add an integration
test for the new metrics.

Co-authored-by: Cursor <cursoragent@cursor.com>
Use a mock OAuth server in the lakekeeper compose stack and valid
client credentials so token refresh and cache-hit profile events are
observed on SHOW TABLES queries.

Co-authored-by: Cursor <cursoragent@cursor.com>
Treat expired OAuth tokens as refresh candidates instead of cache hits,
and count BigLake GCP token refresh once per logical fetch when ADC
fallback to metadata is used.

Co-authored-by: Cursor <cursoragent@cursor.com>
Defer DataLakeRestCatalogAuthTokenCacheHits until createReadBuffer or
sendRequest completes without a 401/403 retry, so stale cached tokens
do not report both a cache hit and a refresh in the same query.

Co-authored-by: Cursor <cursoragent@cursor.com>
@github-actions

Copy link
Copy Markdown

Workflow [PR], commit [2b9b45d]

@ianton-ru
ianton-ru marked this pull request as ready for review August 17, 2026 16:59
@svb-alt
svb-alt requested a review from arthurpassos August 18, 2026 00:25
@ianton-ru ianton-ru added antalya port-antalya PRs to be ported to all new Antalya releases antalya-26.6 labels Aug 18, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

antalya antalya-26.6 port-antalya PRs to be ported to all new Antalya releases

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants