Skip to main content
The data shares credential feature uses a Gravitino Iceberg REST Catalog (IRC) server to enable secure access to shared Iceberg datasets across tenants. A tenant represents a Kubernetes cluster running NexusOne.

​
Implementation walkthrough

The implementation walkthrough of the data shares credential feature includes the following:
  1. As a NexusOne customer, deploy a provider and consumer tenant.
  2. Ingest a dataset into your provider tenant.
  3. Create a Gravitino data share credential in the provider tenant.
  4. Share the credential with the consumer tenant.
  5. Configure an Iceberg REST catalog in the consumer tenant.
  6. Access the shared dataset from the consumer tenant.
The IRC server mediates this interaction by exposing a unified Iceberg REST API. Now, client apps such as Apache Spark and Trino in the consumer cluster can access shared metadata without direct connectivity to the provider’s backend systems. The IRC server manages the backend catalog storage, such as PostgreSQL or Apache Hive Metastore and isolates them from client apps.

​
Use cases

These examples show how different industries and teams can use NexusOne’s data shares credential capabilities:
  • Retail: Share curated datasets such as weekly top-selling products from a provider tenant to a consumer tenant. Downstream dashboards can then access consistent sales data without direct access to the source catalog.
  • Financial services: Share governed datasets such as fraud detection results and compliance metrics from a provider tenant to a consumer tenant. Internal risk systems can then query trusted datasets while maintaining strict tenant isolation and controlled access.

​
Additional resources

For more information about how to create a Gravitino data shares credential, refer to Create a data shares credential.