spec.description | string (nullable) | No | | | max 500 |
spec.displayName | string (nullable) | No | | | max 100 |
spec.grants | array of object | No | [] | | max 50 |
spec.grants[].group | string | Yes | | | min 1, max 64; pattern ^[A-Za-z0-9][A-Za-z0-9._-]*$ |
spec.grants[].verb | string | Yes | | What a grant lets a group do with a catalog. Six verbs exist; use belongs to compute (SqlWarehouse) and is not a data verb. There is no deny, no ALL PRIVILEGES and no per-column verb. | browse, select, write, create, manage |
spec.lakehouseRef | object | Yes | | The Lakehouse that hosts a catalog or a warehouse. | |
spec.lakehouseRef.name | string | Yes | | | min 1, max 63; pattern ^[a-z0-9]([-a-z0-9]*[a-z0-9])?$ |
spec.managedAccess | boolean | No | false | True: the owner cannot grant on this catalog; only platform administrators can. | |
spec.owner | string | Yes | | Exactly one group. Ownership means manage and does not mean select. | min 1, max 64; pattern ^[A-Za-z0-9][A-Za-z0-9._-]*$ |
spec.storage | object (nullable) | No | | Where a catalog's data files live. Omitted: the Lakehouse's storage defaults. | |
spec.storage.bucket | string (nullable) | No | | An isolated bucket per catalog. | min 3, max 63; pattern ^[a-z0-9][a-z0-9.-]*[a-z0-9]$ |
spec.storage.credentialSecretRef | object (nullable) | No | | The per-catalog storage identity. A reference only: the Secret is never part of this resource. | |
spec.storage.credentialSecretRef.key | string | Yes | | | min 1, max 253; pattern ^[-._a-zA-Z0-9]+$ |
spec.storage.credentialSecretRef.name | string | Yes | | | min 1, max 253; pattern ^[a-z0-9]([-a-z0-9.]*[a-z0-9])?$ |
spec.storage.keyPrefix | string (nullable) | No | | Required where all catalogs share one bucket (the demo profile); no leading slash, no ... | max 512; pattern ^[A-Za-z0-9][A-Za-z0-9_./-]*$ |