[ZEPPELIN-5192] Credentials json is required for server startup

• Type: Bug
• Status: Resolved
• Priority: Blocker
• Resolution: Fixed
• Affects Version/s: 0.9.0
• Fix Version/s: 0.9.1, 0.10.0
• Component/s: docker, Kubernetes, security
• Assignee: Niels Grewe
• Reporter: Suchit gupta
• Created: 08/Jan/21 22:16
• Updated: 11/Mar/21 06:19
• Resolved: 11/Mar/21 06:12

Description

Version: 0.9.0

I am trying to deploy the zeppelin-server on Kubernetes with `

ZEPPELIN_CREDENTIALS_ENCRYPT_KEY` mentioned in the k8 config map.

 

However, the deployment fails with error that /zeppelin/config/credentials.json is missing.

 

If I remove the ZEPPELIN_CREDENTIALS_ENCRYPT_KEY the deployment is successful.

 

Error Log:

 

WARN [2021-01-11 16:59:43,393] ({main} ZeppelinConfiguration.java[create]:161) - Failed to load configuration, proceeding with a default
 INFO [2021-01-11 16:59:43,449] ({main} ZeppelinConfiguration.java[create]:173) - Server Host: 0.0.0.0
 INFO [2021-01-11 16:59:43,449] ({main} ZeppelinConfiguration.java[create]:175) - Server Port: 8080
 INFO [2021-01-11 16:59:43,449] ({main} ZeppelinConfiguration.java[create]:179) - Context Path: /
 INFO [2021-01-11 16:59:43,450] ({main} ZeppelinConfiguration.java[create]:180) - Zeppelin Version: 0.9.0-preview2
 INFO [2021-01-11 16:59:43,471] ({main} Log.java[initialized]:169) - Logging initialized @579ms to org.eclipse.jetty.util.log.Slf4jLog
 WARN [2021-01-11 16:59:43,995] ({main} ZeppelinConfiguration.java[getConfigFSDir]:661) - zeppelin.config.fs.dir is not specified, fall back to local conf directory zeppelin.conf.dir
 WARN [2021-01-11 16:59:43,995] ({main} ZeppelinConfiguration.java[getConfigFSDir]:661) - zeppelin.config.fs.dir is not specified, fall back to local conf directory zeppelin.conf.dir
 WARN [2021-01-11 16:59:43,995] ({main} ZeppelinConfiguration.java[getConfigFSDir]:661) - zeppelin.config.fs.dir is not specified, fall back to local conf directory zeppelin.conf.dir
 WARN [2021-01-11 16:59:44,050] ({main} LocalConfigStorage.java[loadCredentials]:88) - Credential file /zeppelin/conf/credentials.json is not existed
 Exception in thread "main" java.lang.NullPointerException
 at org.bouncycastle.util.encoders.Base64.decode(Unknown Source)
 at org.apache.zeppelin.user.Encryptor.decrypt(Encryptor.java:63)
 at org.apache.zeppelin.user.Credentials.loadFromFile(Credentials.java:141)
 at org.apache.zeppelin.user.Credentials.<init>(Credentials.java:65)
 at org.apache.zeppelin.server.ZeppelinServer$1.configure(ZeppelinServer.java:150)
 at org.glassfish.hk2.utilities.binding.AbstractBinder.bind(AbstractBinder.java:187)
 at org.glassfish.hk2.utilities.ServiceLocatorUtilities.bind(ServiceLocatorUtilities.java:187)
 at org.apache.zeppelin.server.ZeppelinServer.main(ZeppelinServer.java:145)

Tried the same with 0.8.2 [ZEPPELIN_CREDENTIALS_ENCRYPT_KEY]and it works and once we define the creds the file i.e credentials.json  is created.

 

Expected the same from 0.9.0

 

P.S If I add an encrypted credentials.json as part for Docker image the server start up is successful.