roryqi opened a new pull request, #14326: URL: https://github.com/apache/gravitino/pull/14326
### What changes were proposed in this pull request? Migrate legacy direct policy bindings to server-managed hidden tags using an offline tool with dry-run, verification, and transactional retries. Add startup checks, hidden-tag protection and cleanup, database schema updates, and upgrade documentation. ### Why are the changes needed? Policy lookup resolves through tags, so historical direct bindings need conversion before the new runtime starts. Related to #12179. ### Does this PR introduce _any_ user-facing change? Adds `bin/migrate-policy-bindings.sh` with `--dry-run` and `--verify`, plus a migration manifest table. Startup rejects unmigrated bindings. Ordinary tag APIs filter and protect hidden tags. ### How was this patch tested? 74 targeted tests passed, covering inheritance, retries, cleanup, API protection, launcher execution, and migration/upgrade idempotency on H2, MySQL, and PostgreSQL. Spotless, shell syntax, documentation links, and `git diff --check` also passed. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
