Access from Trino
Enable Trino access in the Yandex MPP Analytics for PostgreSQL cluster settings to work with the Yandex MPP Analytics for PostgreSQL cluster's data from Managed Service for Trino. This setting enables encrypted data transmission between Greenplum® segments and Trino workers via the GPFDIST protocol.
Note
Access from Trino is a required configuration for reading data from Yandex MPP Analytics for PostgreSQL via GPFDIST in Managed Service for Trino. Encryption is used automatically; you do not need to configure it additionally.
Getting started
- Configure security groups for interaction between the Yandex MPP Analytics for PostgreSQL and Managed Service for Trino clusters. Security groups determine which network connections are allowed.
- Prepare the Greenplum® user and Trino catalog with the Greenplum®/Cloudberry connector. To read data via GPFDIST, the user requires permissions to create writable external tables.
Enabling access from Trino
- In the management console, select the folder containing your cluster.
- Navigate to Yandex MPP Analytics for PostgreSQL.
- Select your cluster and click Edit at the top of the page.
- In the additional settings, enable Access from Trino.
- Click Save and wait for the cluster modification to complete.
If you do not have the Yandex Cloud CLI yet, install and initialize it.
The folder used by default is the one specified when creating the CLI profile. To change the default folder, use the yc config set folder-id <folder_ID> command. You can also specify a different folder for any command using --folder-name or --folder-id.
If you access a resource by its name, the search will be limited to the default folder. If you access a resource by its ID, the search will be global, i.e., through all folders based on access permissions.
-
View the description of the following cluster modification command:
yc managed-greenplum cluster update --help -
Enable access from Trino:
yc managed-greenplum cluster update <cluster_name_or_ID> \ --trino-access=trueThe
--trino-access=trueparameter enables access from Trino with data encryption during transmission. -
Wait for the operation to complete and check the cluster settings:
yc managed-greenplum cluster get <cluster_name_or_ID>Under
config.access, thetrinoparameter must have thetruevalue.
You can also enable access from Trino when creating a cluster: use the Access from Trino setting in the management console, or the --trino-access=true parameter of the yc managed-greenplum cluster createcommand in the CLI.
Configuring data reading
In the Trino catalog with the Greenplum®/Cloudberry connector, configure the settings for reading via GPFDIST:
greenplum.gpfdist.server.enabled:truegreenplum.gpfdist.read.enabled:true
The connector will create external tables and orchestrate data transfer from Greenplum® segments to Trino workers. There is no need to create these external tables manually.
Limitations
- Reading via GPFDIST with encryption requires a Managed Service for Trino cluster running version 476 that supports connector-side encryption.
- This setting is intended solely for integration with Managed Service for Trino.
- Access management from Trino via Terraform is not yet supported. Use the management console or CLI.
- Enabling access from Trino does not replace configuring security groups, database user permissions, and the Trino catalog.
- Configuring applies to data transfer via GPFDIST between Greenplum® segments and Trino workers. Database connection parameters are specified separately in the Trino catalog.
- Limitations on reading data via GPFDIST remain in effect.
Greenplum® and Greenplum Database® are registered trademarks or trademarks of Broadcom Inc. in the United States and/or other countries.
Apache® and Apache Cloudberry™ are registered trademarks or trademarks of the Apache Software Foundation in the United States and/or other countries.