Delta Spark Product Capabilities
This is an integration bundle — it deploys no long-running services. Its job is to wire together the Layer 2 stacks after they are all deployed: granting the right Ranger policies to platform service accounts and seeding any static objects that cross-service features depend on.
What It Does
Ranger Access Grants
After Ranger, Superset, and the BFF are deployed, this bundle runs a post-deploy job that grants Superset's service account access to query data:
| Principal | Resource | Privilege |
|---|---|---|
superset | delta.*.* (all schemas and tables in the delta catalog) | Maintainer |
This is the grant that makes Superset work at all — without it, Superset's service account cannot query any tables through Trino/Ranger.
Shared Environment
A Keycloak service account and a shared environment secret are provisioned for integration jobs that need to authenticate across services without user context.
Static Object Seeding
An rclone job populates static objects (configuration files, shared assets) into S3 that are referenced by other services at runtime.
Why This Exists as a Separate Bundle
Ranger access grants require Ranger, Superset, and the BFF to all be deployed first. Putting the grant in any single service bundle would create a circular dependency. A separate integration bundle with explicit dependsOn on all three resolves this cleanly.