lasdf1234 opened a new issue, #12252:
URL: https://github.com/apache/gravitino/issues/12252
### Describe the feature
Add a design document for entity connection secrets management in Apache
Gravitino:
- Pluggable `GravitinoSecretProvider` SPI and URN reference model
- Reserved `gravitino.secret.keys`, create/alter REST (`secretReferences` /
`secretBindings`, `setSecretBinding` / `setSecretReference`)
- Omit-on-read for secret keys
- In-memory provider for tests / local use
No concrete production backends (Vault / cloud secret managers) in this
design.
### Motivation
Catalog / schema / fileset connection secrets are often stored as plaintext
in
entity properties. Peer systems (Polaris, Databricks) keep secret material
in a
secrets manager and persist references. Gravitino needs an OSS SPI and REST
contract before Enterprise backends.
### Describe the solution
See `design-docs/gravitino-entity-secrets.md` (related PR below).
### Additional context
- Related implementation-oriented issue: #12218
- Related design PR: https://github.com/apache/gravitino/pull/12249
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
