Introduction

Kubit can securely access your Presto cluster with restricted permissions or through S3 storage sharing. To enable this, configure your Presto cluster to be publicly accessible with appropriate access controls. Ensure the firewall associated with your Presto cluster allows traffic on port 8080 (or your custom port) from Kubit IP ranges.

Grant Access

Create a Principal: Set up a principal named kubit in your Presto authentication provider (e.g., LDAP, Kerberos).
Configure Access Control: Add the following rule to your System Access Control file to grant read-only access to specific catalogs. Replace <data_catalog> with the name of the catalog you wish to share with Kubit. You can share multiple catalogs by listing them, separated by |. For example: (data_1|data_2|data_3).
```
{
  "catalogs": [
    ...
    {
      "user": "kubit",
      "catalog": "<data_catalog>",
      "allow": "read-only"
    }
    ...
  ]
}
```

This setup ensures that Kubit can access the necessary data while maintaining security and control over your Presto environment.