11 apache polaris planning and implementation - #23

Merged

mgdenno merged 64 commits into

mainfrom

11-apache-polaris-planning-and-implementation

Sep 2, 2026

Commits on Jul 14, 2026

local polaris testing wip

samlamont
authored and
mgdenno
committed
d7d1daa
wip

samlamont
authored and
mgdenno
committed
bba57e9
copilot updates for multi-realm generalization

samlamont
authored and
mgdenno
committed
d82cfe7
fixing local deployment

samlamont
authored and
mgdenno
committed
d505bab
remove unused manifest

samlamont
authored and
mgdenno
committed
c80e968
[wip] creating polaris principals from keycloak users; enabling jupyterhub token encryption; fixing catalog access

samlamont
authored and
mgdenno
committed
720d1f7
add some carry-over planning docs
mgdenno
committed
fb52e3b

Commits on Jul 17, 2026

Commits on Jul 23, 2026

Stabilize Jupyter Polaris flow before AuthManager work
mgdenno
committed
1b8da91
this is a test notebook for human testing in jupyter
mgdenno
committed
30229c0
Add broker contract and Spark AuthManager prototype scaffold
mgdenno
committed
c3fe966

Commits on Jul 27, 2026

fix duplicate keys
mgdenno
committed
cb3e399
change token lifespan
mgdenno
committed
7b402d8
fix bash script
mgdenno
committed
35008ef

Commits on Jul 28, 2026

working jupyter polaris auth with refresh
mgdenno
committed
97b05c2
add username/password docs login
mgdenno
committed
eb8d066

Commits on Jul 29, 2026

setup initial integration tests for polaris
mgdenno
committed
a396035
make the principal sync optional for individual grants
mgdenno
committed
0db3e1c

Commits on Jul 30, 2026

update docs
mgdenno
committed
4540e86
cleanup unused polaris role for jupyter users
mgdenno
committed
6db00c1

Commits on Jul 31, 2026

Commits on Aug 1, 2026

move notebooks to correct dir
mgdenno
committed
ad150cf
add copilot instructions
mgdenno
committed
d931ff2

Commits on Aug 3, 2026

Fix Polaris auth and Trino catalog config
mgdenno
committed
2c630dd
Update copilot instructions
mgdenno
committed
8472511
update garden project template
mgdenno
committed
a20d124

Commits on Aug 6, 2026

update teehr version
mgdenno
committed
781d0e5

Commits on Aug 18, 2026

add env remote warehouse id to jupyter
mgdenno
committed
1b15ed3
update to skip lfs
mgdenno
committed
e3013aa
skip lfs
mgdenno
committed
e858890

Commits on Aug 19, 2026

add aws keys to local jupyter for dev
mgdenno
committed
3743af6
add a teehr project id to local jupyter
mgdenno
committed
000578d
Merge remote-tracking branch 'origin/main' into 11-apache-polaris-planning-and-implementation
mgdenno
committed
7aef8ca
comment out xpublish
mgdenno
committed
a56e481
comment xpublish
mgdenno
committed
10bd7ce
remove authmanager jar handlng in favor of the package
mgdenno
committed
e50c385

Commits on Aug 20, 2026

cleanup old authmanager code
mgdenno
committed
f066798
update docs
mgdenno
committed
851547c
add encryption to delegated tokens
mgdenno
committed
8da14aa
leave api_keys in keycloak but move delegated session to teehr-api
mgdenno
committed
1a883cb

Commits on Aug 21, 2026

updates to use polaris sts
mgdenno
committed
a4b5985

Commits on Aug 24, 2026

remove keycloak-local-users mount from botstrap
mgdenno
committed
3dd2177

Commits on Aug 25, 2026

fix: stop advertising unsupported s3.remote-signing-enabled to clients

mgdenno
and
claude
committed
309eae2

Commits on Aug 26, 2026

fix: remove vestigial IRSA annotation from jupyter service account

mgdenno
and
claude
committed
4979178
uncomment xpublish to add back to deployment
mgdenno
committed
c85a395

Commits on Aug 27, 2026

remove unused spark-polaris Keycloak client

mgdenno
and
claude
committed
539b52c
fix 3 broker security gaps in the delegated-session flow

mgdenno
and
claude
committed
3332ca7
add automated cluster-mode executor AuthManager test

mgdenno
and
claude
committed
5f3e762
fix KeyError: TEEHR_SPARK_IMAGE in new executor test

mgdenno
and
claude
committed
00775de
change test SA
mgdenno
committed
79ccfa4
fix executor test: kubernetes-pod type for SA control + warehouse default

mgdenno
and
claude
committed
a6f2db9
remove minio spark session util useage. Not needed anymore.
mgdenno
committed
b7fcd88
fix REMOTE_WAREHOUSE_IDENTIFIER after switch off create_minio_spark_session

mgdenno
and
claude
committed
0233830
fix 4 issues: OpenAPI docs, broker error shape, principal sync, access-control doc

mgdenno
and
claude
committed
c692128

Commits on Aug 28, 2026

make small test commit to submod.
mgdenno
committed
5eadf1a