diqiu50 opened a new pull request, #13968: URL: https://github.com/apache/gravitino/pull/13968
### What changes were proposed in this pull request? - With `spark.sql.gravitino.authType=token`, pass the bearer token to the routed Iceberg REST client as the `token` property. - With `kerberos`, fail at catalog initialization with an error naming the auth mode. - Explicit `rest.auth.*`, `token` or legacy OAuth2 properties keep priority and disable both. ### Why are the changes needed? Routed Iceberg catalogs reach IRC without credentials under token auth and fail with 401, and Kerberos fails silently. Fix: #13967 ### Does this PR introduce _any_ user-facing change? Yes. Token is reused for IRC, and a Kerberos session with a routed Iceberg catalog and no explicit `rest.*` auth now fails at initialization. Docs are updated. No new property keys. ### How was this patch tested? Added unit tests in `TestIcebergRestOAuthConfig`. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
