feat(iceberg): support glue catalog

[chenzl25]

I hereby agree to the terms of the RisingWave Labs, Inc. Contributor License Agreement.

What's changed and what's your intention?

• Resolve feat: support glue catalog for iceberg #17476
• Support glue catalog for iceberg sink and source. JNI is used to support the glue catalog, so we just need to configure the right properties for org.apache.iceberg.aws.glue.GlueCatalog

Checklist

• I have written necessary rustdoc comments
• I have added necessary unit tests and integration tests
• I have added test labels as necessary. See details.
• I have added fuzzing tests or opened an issue to track them. (Optional, recommended for new SQL features Sqlsmith: Sql feature generation #7934).
• My PR contains breaking changes. (If it deprecates some features, please create a tracking issue to remove them in the future).
• All checks passed in ./risedev check (or alias, ./risedev c)
• My PR changes performance-critical code. (Please run macro/micro-benchmarks and show the results.)

• My PR contains critical fixes that are necessary to be merged into the latest release. (Please check out the details)

Documentation

• My PR needs documentation updates. (Please use the Release note section below to summarize the impact on users)

Release note

If this PR includes changes that directly affect users or other significant modifications relevant to the community, kindly draft a release note to provide a concise summary of these changes. Please prioritize highlighting the impact these changes will have on users.

• Support glue catalog for iceberg sink and source.

Example

create sink sink_test from t
with (
    type='upsert',
    primary_key='col',
    connector = 'iceberg',
    catalog.type = 'glue',
    catalog.name = 'test',
    warehouse.path = 's3://my-iceberg-bucket/test',
    s3.access.key = 'xxxxxxxxxx',
    s3.secret.key = 'xxxxxxxxxx',
    s3.region = 'ap-southeast-2',
    database.name='test_db',
    table.name='test_table'
);

create source source_test
with (
    connector = 'iceberg',
    catalog.type = 'glue',
    warehouse.path = 's3://my-iceberg-bucket/test',
    s3.access.key = 'xxxxxxxxxx',
    s3.secret.key = 'xxxxxxxxxx',
    s3.region = 'ap-southeast-2',
    database.name='test_db',
    table.name='test_table'
);

[github-actions]

license-eye has totally checked 5161 files.

Valid	Invalid	Ignored	Fixed
2206	1	2954	0

Click to see the invalid file list

• java/connector-node/risingwave-sink-iceberg/src/main/java/com/risingwave/connector/catalog/GlueCredentialProvider.java

[neverchanje]

what if the user is running on gcp or azure? 😅
Looks like the s3 ak/sk should only be "conditionally" required when aws glue is used. Otherwise it should be optional.

[chenzl25]

Currently, if users want to use glue, they should use S3 as well. We can separate the configuration for glue and s3 if we have the requirement.

[neverchanje]

Agree. I only consider that we should offer other storage options in the future when using other catalog .

[neverchanje]

The user-facing interface LGTM.