astronautas commented on issue #15414:
URL: https://github.com/apache/iceberg/issues/15414#issuecomment-3946959548

   One important remark - the catalog in our case returns scoped credentials. 
Could it be that somehow the client `OAuth2Credentials instance` does not know 
how to refresh? We tried both Iceberg's GoogleAuthManager itself and without 
it, seems to break at `com.google.auth.oauth2.OAuth2Credentials`:
   
   ```
   Caused by: java.lang.IllegalStateException: OAuth2Credentials instance does 
not support refreshing the access token. An instance with a new access token 
should be used, or a derived type that supports refreshing.
       at 
com.google.auth.oauth2.OAuth2Credentials.refreshAccessToken(OAuth2Credentials.java:367)
       at 
com.google.auth.oauth2.OAuth2Credentials$1.call(OAuth2Credentials.java:270)
       at 
com.google.auth.oauth2.OAuth2Credentials$1.call(OAuth2Credentials.java:267)
       at java.base/java.util.concurrent.FutureTask.run(FutureTask.java:317)
       at 
com.google.auth.oauth2.OAuth2Credentials$RefreshTask.run(OAuth2Credentials.java:644)
       at 
org.apache.iceberg.gcp.shaded.com.google.common.util.concurrent.DirectExecutor.execute(DirectExecutor.java:31)
       at 
com.google.auth.oauth2.OAuth2Credentials$AsyncRefreshResult.executeIfNew(OAuth2Credentials.java:591)
       at 
com.google.auth.oauth2.OAuth2Credentials.asyncFetch(OAuth2Credentials.java:233)
       at 
com.google.auth.oauth2.OAuth2Credentials.getRequestMetadata(OAuth2Credentials.java:183)
       at 
com.google.auth.http.HttpCredentialsAdapter.initialize(HttpCredentialsAdapter.java:98)
       at 
com.google.cloud.http.HttpTransportOptions$1.initialize(HttpTransportOptions.java:199)
       at 
com.google.cloud.http.CensusHttpModule$CensusHttpRequestInitializer.initialize(CensusHttpModule.java:109)
       at 
com.google.cloud.storage.spi.v1.HttpStorageRpc$InvocationIdInitializer.initialize(HttpStorageRpc.java:187)
       at 
com.google.api.client.http.HttpRequestFactory.buildRequest(HttpRequestFactory.java:91)
       at 
com.google.api.client.http.HttpRequestFactory.buildPostRequest(HttpRequestFactory.java:128)
       at 
com.google.cloud.storage.spi.v1.HttpStorageRpc.open(HttpStorageRpc.java:1145)
       at 
com.google.cloud.storage.ResumableMedia.lambda$startUploadForBlobInfo$0(ResumableMedia.java:38)
       at 
com.google.cloud.storage.Retrying$DefaultRetrier.run(Retrying.java:165)
       ... 37 more
   
   ```


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]


---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to