wangxiaojing commented on issue #13746: URL: https://github.com/apache/gravitino/issues/13746#issuecomment-6159833304
Root cause update: this is not a `#` parsing or truncation issue. The password remains intact in Hive Metastore, and another table option containing `#` is returned intact by Gravitino. When Gravitino loads the table, `SecretPropertyUtils.isSensitivePropertyKey` classifies `flink.password` as sensitive because its key contains `password`. `TableOperationDispatcher.snapshotTable` includes that key in the masking set, and `EntityCombinedTable.properties()` replaces its value with `******` in the table response. The Flink catalog then converts the returned `flink.password` property back into the connector's `password` option. As a result, the connector receives `******` as the actual password and authentication fails, regardless of whether the original password contains `#`. The fix should ensure that the authorized Flink connector receives the configured password instead of consuming the masked response value. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
