lasdf1234 opened a new pull request, #12375: URL: https://github.com/apache/gravitino/pull/12375
### What changes were proposed in this pull request? - Add `SecretManager` for write-through / external-ref lifecycle (`getSecretBindingUrns`, `getSecretReferenceUrns`, `writeSecrets`, `rollbackWritten`). - Add `SecretPropertyUtils` for request checks, URN recognition, and applying URNs into properties. - Add typed `SecretBinding` / `SecretReference` API models (and unit tests). - Extend `SecretProvider` with optional `bindExternalReference`. - Wire `SecretManager` into `GravitinoEnv` / `CatalogManager` / `OperationDispatcher` (hidden-property detection for secret URNs). Create APIs are unchanged in this PR. ### Why are the changes needed? Entity create needs a shared secret lifecycle layer before public create APIs can accept `secretBindings` / `secretReferences`. Fix: #12297 ### Does this PR introduce _any_ user-facing change? - No create API / REST request shape change yet. - Adds typed secret models in the public API module for follow-up create wiring. ### How was this patch tested? - `./gradlew :api:test --tests org.apache.gravitino.secret.TestSecretBindingAndReference :core:test --tests org.apache.gravitino.secret.TestSecretManager --tests org.apache.gravitino.TestGravitinoEnvSecretProviderRegistry -PskipITs` Stacked follow-up: #12366 (create API wiring; base = this branch). Made with [Cursor](https://cursor.com) -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
