Project conventions, architecture, and coding patterns synthesized from 58,000+ review comments across 4,300+ merged PRs.
- API (
api/): Public interfaces and types. Changes affect every engine and catalog. API breaks are almost never acceptable. - Core (
core/): Table spec implementation. Must be engine-agnostic. No Spark/Flink references. Properties should apply to all catalogs. - Data (
data/): Generic data layer (DeleteFilter, BaseDeleteLoader, readers/writers). Behavior should be general, not engine-specific. - Spark (
spark/): Spark integration only. Tests here validate integration, not core behavior. - Flink (
flink/): Same principle as Spark — integration tests only. - REST Catalog (
open-api/): OpenAPI spec for catalog interop. Precision in spec text is critical. - AWS/GCP/Azure: Cloud-specific catalog implementations. Don't leak cloud-specific assumptions into core.
The api/ module has the strongest stability guarantees — breaking changes are almost never allowed. Other modules with public APIs (iceberg-data, iceberg-parquet, and others marked in build.gradle) may have breaking changes in minor releases, but they must be justified and all changes are tracked via revapi. New interface methods in any of these modules must include default implementations.
TableMetadata: Changes ripple through all engines and catalogs. UseTableMetadata.Builder; produce proper metadata updates for REST.SnapshotProducer/MergingSnapshotProducer: The commit path. Validations must use established patterns.ManifestGroup/ManifestReader: Container reuse causes bugs in parallel code. Callers mustcopyWithoutStatsif holding references.- Serialization (parsers): Never use Jackson annotations. Custom
XxxParser.toJson/fromJsononly. JSON keys use kebab-case. Optional fields only written when present. - REST spec: Check for ambiguity, over-constraining, missing client-side guidance. POST for deltas, PUT for full-state replacement.
- Scan planning: Metrics must not leak across
TableScanrefinements. Timers must be thread-safe (parallel manifest scanning).
- Refinement:
TableScanmethods return new independent scans. State must not leak between refinements. CloseableIterableoverStream: Iceberg's standard lazy collection. Always close iterables.- Null over
Optional: Usenullfor missing values.Optionalis not used. - Builder pattern: For complex creation. Never require passing
nullfor optional parameters. - Package-private by default: Only make things public with demonstrated need.
- Postel's Law: Accept case-insensitive input, produce canonical output.
Tasks.foreach: For bulk operations with parallelism, retry, and error handling.- Immutable metadata:
TableMetadata,Schema,PartitionSpec,SortOrderproduce new instances via builders. - Metadata updates for REST: All mutations must produce serializable
MetadataUpdateobjects. SerializableTable: Wrap table references for Spark/Flink serialization. Don't serialize the catalog.- Validate at boundaries:
Preconditionsat public entry points; internal methods assume invariants hold. - Spec version gating: Version 2+ features must check
formatVersion >= 2with clear errors for v1 tables.
- New public methods require strong justification. Prefer package-private.
- Never break APIs. Add default implementations to new interface methods.
- Don't introduce deprecated methods in brand-new interfaces.
- Use
@SuppressWarnings({"unchecked", "rawtypes"})internally rather than widening public signatures. - Prefer builders over multi-argument create methods.
- Keep the
TableAPI small. Utility methods go in helper classes. - Operations should be idempotent. Return final state from
apply(), not intermediate changes. - Minimize third-party types (JTS, Guava) in public APIs.
StructLikeequality requiresStructLikeWrapper.
- Method names describe specific behavior:
selectInIdOrdernotselectOrdered. - Avoid
getprefix — usefind,fetch,load,parse,create, or drop it. - Variable names indicate meaning, not type. Property names use kebab-case.
- Capitalize
IDconsistently.toString()must produce parseable output. - Avoid
Factorysuffix unless the class is a true factory.
- 2 spaces indent, 4 spaces continuation. Empty newline after control flow blocks.
- Use
this.for instance field assignment.Preconditionscalls first in methods. - No
finalon locals. No one-argument-per-line unless necessary. - Magic numbers should be named constants. No personal pronouns in comments.
} else {on same line. Minimize variable scope.try-with-resourcesfor allAutoCloseable.- Prefer method references over lambdas. Wrap lines at the highest semantic level.
- Always use imports — never use fully-qualified class names inline.
- Extract reusable logic to the right utility layer (
TypeUtil,SchemaUtil,DateTimeUtil, etc.). - Engine-specific concepts must not leak into core. Follow existing patterns before introducing new ones.
- Parsers:
XxxParser.toJson/fromJson. Config:XxxProperties. Check existing utilities first. - Avoid expanding Guava — use JDK equivalents. Use
CloseableGroupfor multi-resource lifecycle. - Keep things internal until proven needed.
- Never use Jackson annotations. Custom
XxxParser.toJson/fromJsononly. - JSON keys: kebab-case. Optional fields: only write when non-null. Required fields: validate in constructors.
Preconditions.checkArgumentfor validation.MoreObjects.toStringHelperfortoString().- Wrap
IOExceptioninUncheckedIOException. UseLocale.ROOTfor case conversions. - Use
Iterable/CloseableIterableoverStream. UsenullnotOptional. Chain exception causes. - Use Iceberg's
Pairinstead ofMap.Entry.
- Messages: direct, actionable, with specific values. Capitalize first word.
- Don't swallow exceptions. Use
closeQuietlyfor cleanup that shouldn't mask real failures. - Use
ConcurrentMapfor shared mutable state.Preconditions.checkArgumentover NPE. - Close iterables in
finally. SeparatePreconditionscalls for each condition. - Forward compatibility: don't fail on unknown reserved bytes.
- Watch for hidden materialization in streaming pipelines (copy/collect steps).
- Builders over rebuild patterns in hot paths. Lazy over eager evaluation.
ByteBufferoverbyte[]. Direct-access arrays for dense integer keys.- Avoid streams/closures in tight loops. Cache per-class, not per-call.
- New features default to off. Question whether a property is even needed.
- Properties must work across all catalogs. Zero/negative disables caches/features.
- Versions go to version catalog. Engine-specific properties don't belong in
TableProperties.
- Minimal test setup:
PartitionSpec.unpartitioned()when partitioning isn't needed. - Test classes and methods should be package private unless required by inheritance.
- Compute expected values, don't hardcode. Tests belong in the module that owns the code.
- Write the most direct test for the bug. Parameterized tests for type variations.
- JUnit 5 + AssertJ:
@Test(notestprefix),assertThat,assertThatThrownBy. waitUntilAfterfor time-dependent tests. Separate tests over combined.
- Spec describes behavior, not implementation. RFC 2119: "MUST" = absolute, "SHOULD" = may reject.
- Include client-side guidance. Consistent encoding terminology. 409 for "already exists", not 400.
- Favor the client: required response fields reduce client complexity.
- Build (no tests):
./gradlew build -x test -x integrationTest - Single test class:
./gradlew :iceberg-core:test --tests org.apache.iceberg.TestTableMetadata - Single test method:
./gradlew :iceberg-core:test --tests "org.apache.iceberg.TestTableMetadata.testJsonSerialization" - Spark-versioned module:
./gradlew :iceberg-spark:iceberg-spark-4.1_2.13:test --tests "org.apache.iceberg.spark.source.TestSparkReaderDeletes" - Format code:
./gradlew spotlessApply - Check formatting:
./gradlew spotlessCheck - API compatibility:
./gradlew revApiCheck
- PR titles follow
Module: Descriptionformat (e.g.,Core: Fix ...,Spark: Add ...,Docs: Update ...). - One concern per PR. Unrelated whitespace, import, or formatting changes go in separate PRs.
- Keep first version of a PR minimal — defer recovery, optimization, and edge cases to follow-ups.
- Commit messages describe the what and why, not implementation details.
- Apache License header required on all new files (enforced by spotless pre-commit hook).
- Never modify
.asf.yaml,LICENSE,NOTICE, orversions.propswithout explicit discussion. - Never add Jackson annotations to serialization classes — always use custom
XxxParserclasses. - Never break public API without an approved
revapi.ymlexception. - Never add Hadoop dependencies where
FileIOabstractions exist. - Never commit secrets, credentials, or cloud-specific tokens.
- Ask first before adding new third-party dependencies (license compatibility matters).
- Ask first before promoting package-private classes/methods to public.