Add new Iceberg oauth2 config (#1078)

Author: kbatuigas

modules/manage/partials/iceberg/use-iceberg-catalogs.adoc

@@ -83,7 +83,7 @@ endif::[]
 
 == Integrate filesystem-based catalog (`object_storage`)
 
-By default, Iceberg topics use the filesystem-based catalog (config_ref:iceberg_catalog_type,true,properties/cluster-properties[`iceberg_catalog_type`] cluster property set to `object_storage`). Redpanda stores the table metadata in hhttps://iceberg.apache.org/docs/latest/java-api-quickstart/#using-a-hadoop-catalog[HadoopCatalog^] format in the same object storage bucket or container as the data files.
+By default, Iceberg topics use the filesystem-based catalog (config_ref:iceberg_catalog_type,true,properties/cluster-properties[`iceberg_catalog_type`] cluster property set to `object_storage`). Redpanda stores the table metadata in https://iceberg.apache.org/docs/latest/java-api-quickstart/#using-a-hadoop-catalog[HadoopCatalog^] format in the same object storage bucket or container as the data files.
 
 If using the `object_storage` catalog type, you provide the object storage URI of the table's `metadata.json` file to an Iceberg client so it can access the catalog and data files for your Redpanda Iceberg tables.
 

modules/reference/pages/properties/cluster-properties.adoc

@@ -2094,6 +2094,27 @@ The OAuth URI used to retrieve access tokens for Iceberg REST catalog authentica
 
 // end::iceberg_rest_catalog_oauth2_server_uri[]
 
+// tag::iceberg_rest_catalog_oauth2_scope[]
+=== iceberg_rest_catalog_oauth2_scope
+
+The OAuth scope used to retrieve access tokens for Iceberg catalog authentication. Only meaningful when `iceberg_rest_catalog_authentication_mode` is set to `oauth2`.
+
+*Requires restart:* Yes
+
+*Visibility:* `user`
+
+*Type:* string
+
+*Default:* `principal_role:all`
+
+**Related topics**:
+
+- xref:manage:iceberg/use-iceberg-catalogs.adoc[]
+
+---
+
+// end::iceberg_rest_catalog_oauth2_scope[]
+
 // tag::iceberg_rest_catalog_prefix[]
 === iceberg_rest_catalog_prefix