Skip to content

Conversation

@ebyhr
Copy link
Contributor

@ebyhr ebyhr commented Nov 29, 2025

Trino supports both gcs.json-key-file-path (credentials file) and gcs.json-key (credentials key) in the GCS file system module. https://trino.io/docs/current/object-storage/file-system-gcs.html#authentication

The new property simplifies deployment because it removes the need for a separate file.

@ebyhr ebyhr marked this pull request as ready for review November 29, 2025 08:17
Copy link

@RyanSkraba RyanSkraba left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I think this is a great idea -- it would help us in our deployment as well if we didn't need to drop a file or environment variable into our Iceberg Kafka Connectors.

What do you think about applying this same logic into reading/writing from GCS in the GCS PrefixedStorage?

| Property | Default | Description |
|----------------------------|--------------------------------------------------|--------------------------------------------------|
| `gcp.auth.credentials-path`| Application Default Credentials (ADC) | Path to a service account JSON key file. |
| `gcp.auth.credentials-key` | Application Default Credentials (ADC) | JSON string of a service account credential. |

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
| `gcp.auth.credentials-key` | Application Default Credentials (ADC) | JSON string of a service account credential. |
| `gcp.auth.credentials-json` | Application Default Credentials (ADC) | JSON string of a service account credential. |

Just a suggestion: There's two other GCS connectors by Confluent and Aiven that use gcs.credentials.path and gcs.credentials.json which are slightly more descriptive at first glance. key by itself can be a bit confusing for the intention.

It's too bad we didn't all standardize on the same names, but that ship has sailed 😄

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks for your feedback! I renamed it to gcp.auth.credentials-json.

@ebyhr ebyhr changed the title GCP: Add gcp.auth.credentials-key property GCP: Add gcp.auth.credentials-json property Dec 16, 2025
@ebyhr ebyhr force-pushed the ebi/gcs branch 2 times, most recently from 6e380b9 to 6330456 Compare December 16, 2025 10:16
@ebyhr
Copy link
Contributor Author

ebyhr commented Dec 17, 2025

@danielcweeks @nastra @talatuyarer Could you please review this PR when you have time?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants