Nessie 0.95.0
- 52 commits since 0.94.4
- Maven Central: https://search.maven.org/search?q=g:org.projectnessie.nessie+v:0.95.0
- Docker images: https://github.com/projectnessie/nessie/pkgs/container/nessie and https://quay.io/repository/projectnessie/nessie?tab=tags
It is a multiplatform Java image (amd64, arm64, ppc64le, s390x):docker pull ghcr.io/projectnessie/nessie:0.95.0-java
- PyPI: https://pypi.org/project/pynessie/ (See pynessie)
- Helm Chart repo: https://charts.projectnessie.org/
Try it
The attached nessie-quarkus-0.95.0-runner.jar
is a standalone uber-jar file that runs on Java 17 or newer and it is also available via Maven Central. Download and run it (requires Java 17):
wget https://github.com/projectnessie/nessie/releases/download/nessie-0.95.0/nessie-quarkus-0.95.0-runner.jar
java -jar nessie-quarkus-0.95.0-runner.jar
Nessie CLI is attached as nessie-cli-0.95.0.jar
, which is a standalone uber-jar file that runs on Java 11 or newer. Nessie CLI is also available as a Docker image: docker run --rm -it ghcr.io/projectnessie/nessie-cli:0.95.0
.
Nessie GC tool is attached as nessie-gc-0.95.0.jar
, which is a standalone uber-jar file that runs on Java 11 or newer. Shell completion can be generated from the tool, check its help
command. Nessie GC tool is also available as a Docker image: docker run --rm ghcr.io/projectnessie/nessie-gc:0.95.0 --help
.
Nessie Server Admin tool is attached as nessie-server-admin-tool-0.95.0-runner.jar
, which is a standalone uber-jar file that runs on Java 17 or newer. Shell completion can be generated from the tool, check its help
command. Nessie Server Admin tool is also available as a Docker image: docker run --rm ghcr.io/projectnessie/nessie-server-admin:0.95.0 --help
.
The attached nessie-helm-0.95.0.tgz
is a packaged Helm chart, which can be downloaded and installed via Helm. There is also the Nessie Helm chart repo, which can be added and used to install the Nessie Helm chart.
Changelog
Catalog S3 bucket configuration changes / breaking
- The S3 bucket configuration option
client-authentication-mode
has been removed (defaulted toREQUEST_SIGNING
). - A new S3 bucket configuration option
request-signing-enabled
has been added (defaults totrue
).
Breaking changes
- See above for breaking changes to S3 bucket configurations.
New Features
- Catalog/Trino: Add convenience REST endpoint to provide a starter Trino catalog configuration.
Use/iceberg-ext/v1/client-template/trino?format=static
for Trino 'static' catalog configurations,
/iceberg-ext/v1/client-template/trino?format=dynamic
for Trino 'dynamic' catalog configurations.
Please take a look at the Trino page for known
limitations in Trino. - Catalog: The Iceberg REST header
X-Iceberg-Access-Delegation
is now respected. The functionality
depends on the S3 bucket configuration optionsrequest-signing-enabled
andassume-role-enabled
.
Changes
- Catalog: Only general object store configurations are returned via the
/iceberg/v1/config
endpoint. - Catalog: Table specific options are returned for each individual table, including scoped-down S3
credentials, if applicable. - The Nessie Spark SQL extensions are now based on the same syntax and options that are provided by the
Nessie CLI. A reference docs page for the Nessie Spark SQL command syntax was added to the web site.
Fixes
- Declare the
contentType
variable for CEL Authorization rules. - Catalog: Make Nessie time-travel functionality available to all use cases, including DDL.
Full Changelog (minus renovate commits):
- Quarkus 3.13.1 (#9236)
- Helm Chart: mention imagePullSecrets in values.yaml (#9292)
- Trino config-helper-endpoint & web site updates (#9270)
- Catalog: split S3SessionsManager into several components (#9279)
- Catalog: Enable time-travel and branch/tag selection for Iceberg REST in all cases (#9219)
- Replace antlr w/ congocc grammar in SQL Extensions (#9256)
- Build / IntelliJ: include the project root dir in the IDE window name (#9281)
- Remove Windows CI (#9260)
- Fix illegal access (#9280)
- Catalog: expose
location
for namespaces, iam-policy per location (#9170) - Nit: remove references to unused
pr-native
label (#9272) - Release: make
publish-openapi
job idempotent (#9264) - Add signer-keys service (#9239)
- Scala Compiler and how it disrespects things (#9261)
- Adopt to Iceberg dropping support for Java 8 (#9259)
- Blog: Polaris (#9257)
- Fix Gradle/Kotlin deprecation warning (#9255)
- Fix a Gradle deprecation (#9254)
- Fix
NOTICE
vsLICENSE
confusion (#9250) - Declare the
contentType
variable for CEL AuthZ rules. (#9251) - Add ability to generate IAM policies (#9244)
- Protect Iceberg REST config endpoint (#9247)
- Nit: make some test profiles non-
final
(#9243) - Rename
S3Clients.awsCredentialsProvider()
to make its usage clearer (#9242) - Add
StorageUri.pathWithoutLeadingTrailingSlash()
(#9241) - Add utility method to escape strings in IAMs (#9240)