lasdf1234 opened a new pull request, #12295: URL: https://github.com/apache/gravitino/pull/12295
### What changes were proposed in this pull request? - Add `SecretProviderRegistry` to load named `GravitinoSecretProvider` instances from server conf. - Own the registry in `GravitinoEnv` (same lifecycle pattern as `KmsClientRegistry`). - Expose `GET /configs/secrets/providers` for safe provider discovery (`name` / `type` / optional `uri`). **Depends on / stacked on #12215** (`lasdf1234:feat/gravitino-secret-provider-spi`). Please review the two commits on top of that branch; GitHub cannot use a fork-only branch as the PR base on `apache/gravitino`, so this targets `main` until #12215 lands. ### Why are the changes needed? Clients need to discover registered secret-provider instance names for create/alter bindings, and the server must keep providers loaded for the process lifetime before write/resolve paths land. Fix: #12218 ### Does this PR introduce _any_ user-facing change? - New endpoint: `GET /configs/secrets/providers` - New config keys: `gravitino.secret.providers`, `gravitino.secret.provider.<name>.className`, optional `gravitino.secret.provider.<name>.uri` ### How was this patch tested? - Unit tests: `TestSecretProviderRegistry`, `TestGravitinoEnvSecretProviderRegistry`, `TestSecretProvidersConfigServlet` Made with [Cursor](https://cursor.com) -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
