[viethqb]

Summary

Docs for egret-data/platform#850 (StarRocks impersonation users, CN password and delete leftovers).

Changes

• Engines and Ranger: new section "StarRocks users for impersonation". It covers the egret-delegator-impersonate row, the user sync with platform admins included, foreign same-name users being left alone, and native access control (per-user grants).
• Workspace databases: what a member needs on a StarRocks impersonation engine.
• Engine detail: delete removes the initpwd Job pods and the FE metadata volumes; added a note that kubectl delete sts now cascades to those volumes (use --cascade=orphan).
• Provision: create answers 409 engine_metadata_left_over and gives the cleanup command.
• Upgrade notes: finding claims left by earlier deletes; orphan grants.
• REST reference: the new 409 on POST /engines.
• Known issues:
  • KI-356 and KI-357 are fixed in #850;
  • KI-358 is new (orphan per-user IMPERSONATE grants, with manual cleanup);
  • KI-359 is new (a lost CREATE USER reply leaves an unmanaged user; recovery is to drop the user).

npm run build passes. There are no UI changes, so no screenshots.

🤖 Generated with Claude Code