Lakekeeper

This is Lakekeeper: A secure, fast, and user-friendly Apache Iceberg REST Catalog built with Rust and available under the Apache License. Enterprise-ready with Lakekeeper+, built and supported by Vakamo.

Get Started Lakekeeper+ Join Our Community

Built by

M+

Monthly Downloads

Stars

Pull Requests

Forks

Overview

Iceberg delivers the transactional consistency of a data warehouse while letting compute and storage scale independently on a data lake — warehouse guarantees with data-lake scale.

Our Features

Apache Iceberg REST Catalog

A fast, standards-compliant Apache Iceberg REST catalog. Works with every Iceberg engine — Spark, Trino, Flink, DuckDB, PyIceberg and more — with no lock-in, powered by a Rust-native core with no garbage collector.

Unstructured Data

One catalog for more than Iceberg. Govern generic tables (Lance, Delta, Parquet) and unstructured files as first-class, access-controlled objects — with the same credential vending and access control, so one catalog governs your whole lakehouse.

Centralized & Open Access Control for Humans and Agents

Define access control once, in the catalog, and enforce it across every compute engine — for people and for AI agents alike. Permissions are fine-grained and inherited down to individual tables and views, in the model you already use (RBAC, ReBAC, or ABAC), powered by OpenFGA — with an OPA bridge for enforcement in query engines such as Trino.

Permission-as-Code with Cedar

Express access policy as versioned, reviewable Cedar policies — with per-decision policy traces and audit logs. Governance you can test and prove, built for regulated industries. Available with Lakekeeper+.

Enterprise Identity Providers

Resolve roles straight from your identity provider — Okta, Microsoft Entra ID, and LDAP — so access follows your existing groups. Gate entry with an external admission check and protect provider-synced roles from drift. Available with Lakekeeper+.

Autonomous Table Maintenance

Keep query performance high and storage costs low with automatic, adaptive table maintenance — expiring snapshots and removing orphan files, run for you. Available with Lakekeeper+.

Enterprise Support by Vakamo

Run Lakekeeper at the heart of your platform with confidence: commercial support for self-hosted and managed deployments, plus hardened Long-Term Support release lines — from Vakamo, the team behind Lakekeeper.

Rust Native

Lakekeeper is written in Rust and based on `iceberg-rust`. Our own crates contain no unsafe code — enforced at compile time with `#![forbid(unsafe_code)]`.

Checkout The Code

Run in Production with

The open-source catalog is production-ready. For regulated industries and teams that want the catalog operated for them — permission-as-code with Cedar, autonomous table maintenance, and enterprise support — Lakekeeper+ is the production-grade path, backed by Vakamo.

Explore Production Get a Lakekeeper+ Trial

Learn More

New to Lakekeeper? Start with the Getting Started guide, spin up a ready-to-run example, or browse talks, demos and more guides & resources.

More Guides & Resources