nessie icon indicating copy to clipboard operation
nessie copied to clipboard

[Bug]: auth-credentials-json missing

Open julien-alpaca opened this issue 6 months ago • 0 comments

What happened

Deploying Nessie helm chart in k8s with the following configuration:

    gcs:
      # Global GCS settings. Can be overridden on a per-bucket basis below.
      defaultOptions:
   
        # -- The authentication type to use. Valid values are: NONE, USER, SERVICE_ACCOUNT,
        # ACCESS_TOKEN, APPLICATION_DEFAULT. The default is NONE.
        authType: SERVICE_ACCOUNT

        # -- The Google Cloud service account key secret. This is required when authType is USER or
        # SERVICE_ACCOUNT.
        authCredentialsJsonSecret:
          # -- The secret name to pull a valid Google Cloud service account key from.
          name: gcs-credentials
          # -- The secret key storing the Google Cloud service account JSON key.
          key: service_account.json

I checked that secret exists in the same namespace. I can see the env variables when I exec in the pod. Pod is running but failing with:

Readiness probe failed: HTTP probe failed with statuscode: 503

and logs show:

2025-06-25 14:36:21,411 ERROR [org.pro.ser.cat.ObjectStoresHealthCheck] (executor-thread-1) Failed to ping warehouse 'lakehouse-staging', error ID eb6c83c2-2a90-4226-8959-ca0ba0c85ae7: java.lang.IllegalStateException: auth-credentials-json missing
	at org.projectnessie.catalog.files.gcs.GcsClients.lambda$buildCredentials$6(GcsClients.java:163)
	at java.base/java.util.Optional.orElseThrow(Optional.java:403)
	at org.projectnessie.catalog.files.gcs.GcsClients.buildCredentials(GcsClients.java:163)
	at org.projectnessie.catalog.files.gcs.GcsClients.buildStorage(GcsClients.java:66)
	at org.projectnessie.catalog.files.gcs.GcsStorageSupplier.forLocation(GcsStorageSupplier.java:88)
	at org.projectnessie.catalog.files.gcs.CatalogProducers_ProducerMethod_gcsStorageSupplier_J1pIIX_QvARIWs6mZ7jYuiqmhNY_ClientProxy.forLocation(Unknown Source)
	at org.projectnessie.catalog.files.gcs.GcsObjectIO.ping(GcsObjectIO.java:72)
	at org.projectnessie.catalog.files.DelegatingObjectIO.ping(DelegatingObjectIO.java:35)

env variables in pod:

Image

How to reproduce it

Deploy nessie with the above configuration (GCS storage with service account)

Nessie server type (docker/uber-jar/built from source) and version

latest version k8s

Client type (Ex: UI/Spark/pynessie ...) and version

trino

Additional information

No response

julien-alpaca avatar Jun 25 '25 14:06 julien-alpaca