diqiu50 opened a new issue, #14029:
URL: https://github.com/apache/gravitino/issues/14029

   ### Version
   
   main branch
   
   ### Describe what's wrong
   
   For a hive/jdbc-backed Iceberg catalog on an S3/GCS/ADLS/OSS warehouse, the 
Spark connector requires `credential-providers` in the catalog properties 
before routing it through the Iceberg REST server. When `credential-providers` 
is omitted, the server infers it (for example `s3-secret-key` from 
`s3-access-key-id` and `s3-secret-access-key`), and the Iceberg REST server 
uses the inferred list. However, the catalog properties returned to clients 
don't include the inferred list unless 
`gravitino.catalog.credential.backfillToProperties` is enabled. As a result, 
Spark rejects a catalog that the Iceberg REST server can serve.
   
   ### Error message and/or stacktrace
   
   ```
   java.lang.IllegalStateException: Catalog's warehouse has a native Iceberg 
FileIO but no credential-providers configured; ...
   ```
   
   ### How to reproduce
   
   1. Create an Iceberg catalog with `catalog-backend=hive`, an `s3://` 
warehouse, and `s3-access-key-id` / `s3-secret-access-key`, without 
`credential-providers`.
   2. Enable the Iceberg REST service.
   3. Access the catalog from Spark. It fails with the error above.
   
   ### Additional context
   
   Trino queries the same catalog through the Iceberg REST server.
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to