smaheshwar-pltr opened a new pull request, #17984: URL: https://github.com/apache/iceberg/pull/17984
Similar to https://github.com/apache/iceberg/pull/16525. An encrypted snapshot records the ID of the key needed to read its manifest list. Previously, `ManifestListWriter` published that key into a mutable `EncryptionManager`, while `HiveTableOperations` copied the manager's contents into table metadata later in the commit. A concurrent refresh could replace the manager between those steps, allowing the snapshot to commit without its key and leaving the table unreadable. `SnapshotProducer` now captures the manager used by `ManifestListWriter`, calls `toManifestListFile()` once, resolves the manifest-list key and its wrapping key from that same manager, and adds both to the `TableMetadata.Builder` that adds the snapshot. Hive no longer merges or copies keys from a mutable manager during refresh or commit. It rebuilds the manager from committed metadata. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
