[fix](fe) Improve MaxCompute catalog validation#64119
Conversation
|
Thank you for your contribution to Apache Doris. Please clearly describe your PR:
|
|
run buildall |
TPC-H: Total hot run time: 28829 ms |
TPC-DS: Total hot run time: 169519 ms |
FE Regression Coverage ReportIncrement line coverage |
|
run buildall |
FE Regression Coverage ReportIncrement line coverage |
TPC-H: Total hot run time: 29310 ms |
TPC-DS: Total hot run time: 169725 ms |
|
/review |
There was a problem hiding this comment.
I found one blocking issue in the new MaxCompute namespace-schema validation path. The PR otherwise stays focused on MaxCompute catalog validation and unsupported table/view rejection, with targeted unit tests added, but this validation path can reject valid existing deployments that use private/intranet MaxCompute endpoints.
Critical checkpoint conclusions:
- Goal/test: The goal appears to be earlier MaxCompute validation and explicit rejection of unsupported external tables/logical views. The new tests cover local branching and unsupported table/view checks, but not private/intranet endpoint behavior for the new OpenAPI validation.
- Scope/focus: The code change is mostly focused, though it adds a new SDK dependency and a second MaxCompute client path.
- Concurrency/lifecycle: No new shared mutable concurrency path found. Catalog initialization remains synchronized by ExternalCatalog, but the new remote validation runs during lazy initialization.
- Configuration/compatibility: The new OpenAPI validation does not honor the existing mc.endpoint/private endpoint configuration, which is a compatibility regression for namespace-schema catalogs.
- Parallel paths: Read and write unsupported-table checks were both updated.
- Error handling/observability: Errors are surfaced during catalog initialization with useful context, but the incorrect endpoint selection makes the error misleading for private endpoint users.
- Data correctness/transactions/persistence: No transaction visibility or persisted metadata format issue found in the reviewed diff.
- Performance: No hot-path performance issue found; validation runs at initialization.
- Security model/focus: I read SECURITY.md and threat-model.md because this PR touches external catalog connection/auth material. The finding is an operational correctness/compatibility issue, not a security vulnerability under the model. No additional user-provided review focus was present.
|
run buildall |
FE UT Coverage ReportIncrement line coverage |
afb3991 to
d1e407c
Compare
|
run buildall |
FE Regression Coverage ReportIncrement line coverage |
What problem does this PR solve?
Problem Summary:
Add the
mc.validate_connectionparameter, which defaults to false, to perform ak-sk、 project 、schema validation when creating a catalog.Release note
None
Check List (For Author)
Test
Behavior changed:
Does this need documentation?
Check List (For Reviewer who merge this PR)