roryqi commented on code in PR #14595: URL: https://github.com/apache/gravitino/pull/14595#discussion_r4463237379
########## docs/lakehouse-iceberg-catalog.md: ########## @@ -87,6 +87,12 @@ The following properties tune REST backend behavior: | `data-access` | Data access mode for REST catalog backend. Supported values are `vended-credentials` and `remote-signing`. | (none) | No | | `rest-client-connection-timeout-ms` | The HTTP connection timeout in milliseconds for requests to the REST catalog backend. | 10000 | No | | `rest-client-socket-timeout-ms` | The HTTP socket timeout in milliseconds for requests to the REST catalog backend. | 60000 | No | +| `rest-backend-auth-type` | How the REST backend authenticates to the remote catalog: `user-token` forwards the calling user's token, `service-account` connects with `rest-backend-token` or `rest-backend-credential` and authorizes every request in Gravitino. | user-token | No | +| `rest-backend-token` | Static bearer token for a `service-account` connection. Hidden from catalog responses. | (none) | No | +| `rest-backend-credential` | OAuth2 client credential (`client_id:client_secret`) for a `service-account` connection. Hidden from catalog responses. | (none) | No | +| `rest-backend-oauth2-server-uri` | OAuth2 token endpoint for `rest-backend-credential`. | (none) | No | +| `rest-backend-scope` | OAuth2 scope requested with `rest-backend-credential`. | (none) | No | +| `rest-backend-credential-vending` | Who issues storage credentials through the Iceberg REST service: `remote` passes through the remote catalog's credentials, `gravitino` issues them through this catalog's `credential-providers`. | remote | No | Review Comment: Will it better to use `local` or `remote`? -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
