Skip to content

[Spark] Enable credScopedFs by default in Spark connector#1479

Open
openinx wants to merge 4 commits into
unitycatalog:mainfrom
openinx:enable-cred-scoped-fs-by-default
Open

[Spark] Enable credScopedFs by default in Spark connector#1479
openinx wants to merge 4 commits into
unitycatalog:mainfrom
openinx:enable-cred-scoped-fs-by-default

Conversation

@openinx
Copy link
Copy Markdown
Collaborator

@openinx openinx commented Apr 7, 2026

PR Checklist

  • A description of the changes is added to the description of this PR.
  • If there is a related issue, make sure it is linked to this PR.
  • If you've fixed a bug or added code that should be tested, add tests!
  • If you've added or modified a feature, documentation in docs is updated

Description of changes

Enable credScopedFs.enabled by default in the Spark connector (DEFAULT_CRED_SCOPED_FS_ENABLED = true). Previously users had to explicitly set credScopedFs.enabled=true in their catalog options to opt in. Since the credential-scoped filesystem provides better credential isolation and security, it should be the default behavior going forward. Users who need the old behavior can still opt out by setting credScopedFs.enabled=false.

Also updates BaseSparkIntegrationTest helper overloads to default to credScopedFsEnabled=true, so non-parameterized tests exercise the new default. The parameterized tests already cover both false and true combinations explicitly.

Signed-off-by: Zheng Hu <openinx@gmail.com>
@openinx openinx requested a review from tdas as a code owner April 7, 2026 16:47
openinx added 2 commits April 7, 2026 10:01
…ault

Signed-off-by: Zheng Hu <openinx@gmail.com>
Signed-off-by: Zheng Hu <openinx@gmail.com>
return createSparkSessionWithCatalogs(false, false, catalogs);
}

protected SparkSession createSparkSessionWithCatalogs(boolean renewCred, String... catalogs) {
Copy link
Copy Markdown
Collaborator Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This method actually is unused any more, so we should be safe to remove it.

@openinx openinx changed the title Enable credScopedFs by default in Spark connector [Spark] Enable credScopedFs by default in Spark connector Apr 7, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant