Authentication in YQL over YTsaurus Flow

To authenticate with YTsaurus as someone other than your query's submitting user, or with external providers, add token through YTsaurus UI.

Uploading a token to Cypress

Before adding a token in UI settings, upload file containing it to Cypress. Example command:

cat /path/to/local/secret | yt --proxy <pipeline-cluster> write-file //path/to/secret

Token file security

You are responsible for securing your token file using ACLs.

Only you should have access to this file — make sure no one else has permission to read this node.

Adding a token

To add a token:

Open Settings using its gear icon at bottom left.
Select Queries in your settings sidebar.
Under Request tokens, click Add Query Token and specify Cypress path to your token file.
Attach tokens to your query: open Tokens using its key icon in your top toolbar and select tokens to attach.

Token names

To use a token by default without specifying additional pragmas, choose its name by provider:

default_ytflow — for access to internal YTsaurus Flow tables.
default_yt — for access to YTsaurus.

To select a custom token for a query, use its provider's {provider}.Auth pragma.

Pragma reference

Overview