mengw15 opened a new issue, #4987:
URL: https://github.com/apache/texera/issues/4987

   ### Task Summary
   
   `IcebergUtil.createRestCatalog` passes hardcoded `s3.endpoint`,
   `s3.region`, `s3.path-style-access`, `s3.access-key-id` and
   `s3.secret-access-key` (sourced from `StorageConfig.s3*`) when initializing
   the catalog. These entries are inert at runtime: the REST catalog server
   returns the same settings per-table in the `loadTable` `config` response,
   and Iceberg's `S3FileIO` ignores any locally-set credentials whenever the
   server's response includes `s3.remote-signing-enabled: true` (Lakekeeper's
   default).
   
   They also block per-warehouse storage isolation, where each warehouse may
   point to a different bucket / region / credentials.
   
   ### Proposed change
   
   Drop the five `s3.*` entries from the properties map in
   
`common/workflow-core/src/main/scala/org/apache/texera/amber/util/IcebergUtil.scala`.
   Pass only `warehouse`, `CatalogProperties.URI`, and
   `CatalogProperties.FILE_IO_IMPL` — the catalog server stays the source of
   truth for S3 settings.
   
   ### Task Type
   
   Refactor / Cleanup
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to