diqiu50 opened a new issue, #12709: URL: https://github.com/apache/gravitino/issues/12709
### What would you like to be improved? `lakehouse-iceberg` catalogs loaded through the Gravitino Spark connector do not get vended credentials. Non-REST backends (`hive`/`jdbc`) are translated into Spark/Iceberg's `hive`/`jdbc` catalog type, which has nowhere to receive short-lived, vended credentials from Gravitino — only Iceberg's `rest` catalog type consumes those. This mirrors the same limitation already fixed for the Trino connector in #12554: `catalog-backend` describes how Gravitino stores metadata; it should not decide the engine's access path. ### How should we improve? Route `lakehouse-iceberg` catalogs through the Gravitino Iceberg REST server (IRC) instead, the same way the Trino connector now does. Discover the IRC endpoint automatically from the Gravitino server for the connector's metalake, with a manual override (`spark.sql.gravitino.iceberg.rest-uri`) and REST client auth pass-through (`spark.sql.gravitino.iceberg.rest.*`, including OAuth reuse) for deployments that need it. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
