LuciferYang opened a new issue, #13246: URL: https://github.com/apache/gravitino/issues/13246
**What would you like to be improved?** `omitStaticCredentialProperties` strips static cloud credentials from REST metadata before merging into GVFS client configuration, but the key set omits six static credentials defined in the same module: `azure-client-secret`, `aws-access-key-id`/`aws-secret-access-key` (Glue), and `dlf-access-key-id`/`dlf-access-key-secret`/`dlf-security-token` (Paimon DLF). Those credentials pass straight through the filter into client configuration, violating the class's documented contract, even though no working auth path currently consumes them. **How should we improve?** Add the six missing keys to the filtered set so the filter matches its documented contract. GVFS never consumes these keys (they are server-side metadata used to mint vended credentials), so no working auth path is affected. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
