Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add Trino configuration docs #297

Merged
merged 1 commit into from
Apr 12, 2024
Merged

Conversation

mosabua
Copy link
Member

@mosabua mosabua commented Apr 3, 2024

Description

  • with process forwarding config only for now

OAuth2 and other tips will follow in separate PRs from @willmostly and others.

Additional context and related issues

Replaces #217

Release notes

(x) This is not user-visible or is docs only, and no release notes are required.

@cla-bot cla-bot bot added the cla-signed label Apr 3, 2024
@mosabua mosabua requested a review from willmostly April 3, 2024 16:16
@mosabua mosabua mentioned this pull request Apr 3, 2024
@mosabua mosabua force-pushed the trino-config branch 2 times, most recently from fbf4133 to e6dcb1f Compare April 3, 2024 17:24
@mosabua mosabua requested review from vishalya and Chaho12 April 12, 2024 16:52
Copy link
Contributor

@willmostly willmostly left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Placement in the installation section looks good, and the content is accurate. I'm not sure if the additional information on TLS termination is worth mentioning or if it is distracting - up to your judgement.

scenarios, where the local URL of the Trino cluster is private to the Trino
cluster on the DNS/network level, these following calls might not work at all
for users.

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This setting is also required for Trino to authenticate in the case TLS is terminated at the Trino Gateway. Normally it refuses to authenticate plain HTTP requests, but if http-server.process-forwarded=true it will authenticate over HTTP if the request includes X-Forwarded-Proto: HTTPS. I doubt this is a common set up, but perhaps worth mentioning.

Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Good point... I added this as well. Maybe we should also add to Trino docs honestly.. hahah

Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I will create a ticket to do that .. just looked .. the docs for that in Trino are bad..

docs/installation.md Outdated Show resolved Hide resolved
docs/installation.md Outdated Show resolved Hide resolved
- with process forwarding config only for now
@mosabua mosabua merged commit ab9e814 into trinodb:main Apr 12, 2024
1 check passed
@mosabua mosabua deleted the trino-config branch April 12, 2024 21:41
@github-actions github-actions bot added this to the 8 milestone Apr 12, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Development

Successfully merging this pull request may close these issues.

2 participants