nessie
nessie copied to clipboard
[Bug]: auth-credentials-json missing
What happened
Deploying Nessie helm chart in k8s with the following configuration:
gcs:
# Global GCS settings. Can be overridden on a per-bucket basis below.
defaultOptions:
# -- The authentication type to use. Valid values are: NONE, USER, SERVICE_ACCOUNT,
# ACCESS_TOKEN, APPLICATION_DEFAULT. The default is NONE.
authType: SERVICE_ACCOUNT
# -- The Google Cloud service account key secret. This is required when authType is USER or
# SERVICE_ACCOUNT.
authCredentialsJsonSecret:
# -- The secret name to pull a valid Google Cloud service account key from.
name: gcs-credentials
# -- The secret key storing the Google Cloud service account JSON key.
key: service_account.json
I checked that secret exists in the same namespace. I can see the env variables when I exec in the pod. Pod is running but failing with:
Readiness probe failed: HTTP probe failed with statuscode: 503
and logs show:
2025-06-25 14:36:21,411 ERROR [org.pro.ser.cat.ObjectStoresHealthCheck] (executor-thread-1) Failed to ping warehouse 'lakehouse-staging', error ID eb6c83c2-2a90-4226-8959-ca0ba0c85ae7: java.lang.IllegalStateException: auth-credentials-json missing
at org.projectnessie.catalog.files.gcs.GcsClients.lambda$buildCredentials$6(GcsClients.java:163)
at java.base/java.util.Optional.orElseThrow(Optional.java:403)
at org.projectnessie.catalog.files.gcs.GcsClients.buildCredentials(GcsClients.java:163)
at org.projectnessie.catalog.files.gcs.GcsClients.buildStorage(GcsClients.java:66)
at org.projectnessie.catalog.files.gcs.GcsStorageSupplier.forLocation(GcsStorageSupplier.java:88)
at org.projectnessie.catalog.files.gcs.CatalogProducers_ProducerMethod_gcsStorageSupplier_J1pIIX_QvARIWs6mZ7jYuiqmhNY_ClientProxy.forLocation(Unknown Source)
at org.projectnessie.catalog.files.gcs.GcsObjectIO.ping(GcsObjectIO.java:72)
at org.projectnessie.catalog.files.DelegatingObjectIO.ping(DelegatingObjectIO.java:35)
env variables in pod:
How to reproduce it
Deploy nessie with the above configuration (GCS storage with service account)
Nessie server type (docker/uber-jar/built from source) and version
latest version k8s
Client type (Ex: UI/Spark/pynessie ...) and version
trino
Additional information
No response