(polaris) branch main updated: docs: clarify remove_orphan_files with vended credentials (#4170)

[yu...@apache.org]

This is an automated email from the ASF dual-hosted git repository.

yufei pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/polaris.git


The following commit(s) were added to refs/heads/main by this push:
     new a95e16418a docs: clarify remove_orphan_files with vended credentials (#4170)
a95e16418a is described below

commit a95e16418aa58580eb569d0c2bfb3ae34ce75cf0
Author: Prathyush Shankar <pr...@gmail.com>
AuthorDate: Sat Apr 11 16:22:56 2026 -0400

    docs: clarify remove_orphan_files with vended credentials (#4170)
---
 site/content/in-dev/unreleased/_index.md | 5 ++---
 1 file changed, 2 insertions(+), 3 deletions(-)

diff --git a/site/content/in-dev/unreleased/_index.md b/site/content/in-dev/unreleased/_index.md
index ed0cfaa662..7fc740bbe1 100644
--- a/site/content/in-dev/unreleased/_index.md
+++ b/site/content/in-dev/unreleased/_index.md
@@ -151,10 +151,9 @@ To secure interactions with service connections, Polaris vends temporary storage
 execution. These credentials allow the query engine to run the query without requiring access to your cloud storage for
 Iceberg tables. This process is called credential vending.
 
-As of now, the following limitation is known regarding Apache Iceberg support:
+The following applies to Apache Iceberg with Apache Spark:
 
-- **remove_orphan_files:** Apache Spark can't use credential vending
-  for this due to a known issue. See [apache/iceberg#7914](https://github.com/apache/iceberg/pull/7914) for details.
+- **remove_orphan_files**: By default this procedure lists storage through Spark's Hadoop layer, not Iceberg, so Polaris vended credentials may not apply to that step. From **Iceberg 1.10**, use **`prefix_listing => true`** in `CALL ... remove_orphan_files(...)` (or **`.usePrefixListing(true)`** on `SparkActions.deleteOrphanFiles`) so listing uses Iceberg's file client and vended credentials apply. See [apache/iceberg#12254](https://github.com/apache/iceberg/pull/12254). Note: Listing ru [...]
 
 ### Identity and access management (IAM)