Gabriel39 opened a new issue, #70342: URL: https://github.com/apache/doris/issues/70342
### Description Iceberg encrypted-read groundwork currently admits HMS catalogs only. The pinned Iceberg REST operations also use the plaintext encryption manager, so adding REST to the catalog allowlist alone cannot decrypt encrypted manifest lists and manifests. Add a lazy, read-only REST operations/FileIO adapter that uses the encryption key chain returned by the catalog and the effective KMS configuration. Preserve REST authentication, table-specific credentials, historical snapshots, refresh behavior and FileIO ownership. Cover actual encrypted metadata reads and failure paths with unit tests, and add a REST protocol fixture plus SQL regression coverage. This work should match the existing staged HMS scope: Iceberg v3, standard SDK encryption and Parquet. The shared encrypted SQL execution fence must remain until protected key transport and backend admission are completed; encrypted writes are outside this change. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
