Hi All,

Heads up: I've just run into an issue with Iceberg 1.10.0, where session
headers are not propagated to the `/credentials` endpoint calls.

Basically, if Spark has --conf
spark.sql.catalog.polaris.header.Polaris-Realm=MyRealms then loadTable
happens in the right reals, but if Spark has to refresh storage credentials
the call to /credentials does not have a Polaris-Realm header, resulting in
its executing in the *default* realm.

I was able to reproduce it locally.

The bug appears to be in the Iceberg java code. I believe 1.9.0 and later
versions are affected.

I'll keep investigating tomorrow.

Cheers,
Dmitri.

Reply via email to