Function createS3Secret

server/server.go:1975–1977

createS3Secret creates a DuckDB secret for S3/MinIO access. This is a standalone function so it can be reused by control plane workers. Supports three providers: - "config": explicit credentials (for MinIO or when you have access keys) - "credential_chain": DuckDB's built-in credential chain (does N

(db *sql.DB, dlCfg DuckLakeConfig)

// but without indexes each batch requires a sequential scan.
//
// Keep in sync with the catalog-maintenance side of the house: the same index
// set (under ducklake_*_idx names) is applied to shared/standalone catalogs by
// the DuckLake maintenance tooling (PostHog/millpond, tools/ducklake_maintenance.py
// CATALOG_INDEXES). The two never overlap here because workers attach per-tenant
// catalogs, not the shared one.
var duckLakeMetadataIndexes = []duckLakeMetadataIndex{