lasdf1234 opened a new pull request, #13579: URL: https://github.com/apache/gravitino/pull/13579
### What changes were proposed in this pull request? **Stacked on #13539** — please review the hide/GVFS commit relative to that PR: https://github.com/apache/gravitino/compare/lasdf1234:fix/hide-access-key-ids...lasdf1234:fix/hide-access-key-ids-gvfs - Mark static access-key IDs hidden on catalog read paths - Deliver `CredentialPropertyKeys` only via `getCredentials` (not `getSecrets`) - Recover static credentials in Java/Python GVFS after masking - Docs for the masking / `getCredentials` recovery contract ### Why are the changes needed? #13539 adds connector-side static credential recovery. This follow-up flips the user-facing hide and keeps GVFS working when those keys are no longer available from `properties()` / `getSecrets()`. Fix: #13538 ### Does this PR introduce _any_ user-facing change? - [x] Yes (please explain below) - [ ] No - [ ] Not sure (please explain below) Load/list masks static access-key IDs as `******`; clients recover plaintext via `getCredentials` (and GVFS merges static credentials accordingly). ### How was this patch tested? - [x] unit tests - Metadata hide expectations, `SecretPropertyUtils` / `CredentialPropertyKeys`, GVFS Java and Python merge/recovery coverage Made with [Cursor](https://cursor.com) -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
