You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@polaris.apache.org by "mjumbewu (via GitHub)" <gi...@apache.org> on 2025/04/23 03:43:07 UTC
[I] Credentials are not output to standard out when following Quickstart [polaris]
mjumbewu opened a new issue, #1428:
URL: https://github.com/apache/polaris/issues/1428
### Describe the bug
When following the [instructions from the Quickstart](https://github.com/apache/polaris/blob/5f2a37570c7ed3cf79842422a7f4f1f9ed56c6bc/site/content/in-dev/unreleased/getting-started/quickstart.md?plain=1#L60) there are no lines containing the client secret and id.
### To Reproduce
```shell
cd ~/polaris
# Build the server
./gradlew clean :polaris-quarkus-server:assemble :polaris-quarkus-server:quarkusAppPartsBuild --rerun
# Start the server
./gradlew run
```
### Actual Behavior
Output is:
```
Configuration on demand is an incubating feature.
@@@@ @@@ @ @ @@@@ @ @@@@ @@@@ @ @@@@@ @ @ @@@ @@@@
@ @ @ @ @ @ @ @ @ @ @@ @ @ @ @ @ @ @ @ @ @
@@@@ @ @ @ @@@@@ @@@@ @ @@ @ @@@@@ @ @@@@@ @ @ @ @ @@@
@ @@@ @@@@ @ @ @ @@ @ @@@@ @@@@ @ @ @ @@ @@ @@@@ @@@ @@@@
*
/////\
//\\///T\\\
///\\\////\\\\\\
//\\\\T////\\\\\\\\\
/T\ //\\\\\T///T\\//T\\\\\\
//\\\/////T\\////\\/////\\\\\\\ //\\
//\\\\\\T///////////////////T\\\\\\\T\\\\\
//\\\\/////T\//////////\///////T\\\\\T\\\\\\\\
//\\\\\/////\\\T////////////////\\\\\\/\\\\\\\\\
,,..,,,..,,,..,//\\\\////////\\\\\\\\\\/////////\\\\\///\\\\\\\\\\,,,..,,..,,,..,,,.
,,..,,,..,,,..,,,..,,,..,,,..,,,..,,,..,,,..,,,..,,,..,,,..,,,..,,,..,,,.,,,..,,,..,
Powered by Quarkus 3.21.2
2025-04-22 18:12:10,610 WARN [io.qua.config] [,] [,,,] (main) Unrecognized configuration key "quarkus" was provided; it will be ignored; verify that the dependency extension for this configuration is set or that you did not make a typo
2025-04-22 18:12:11,350 WARN [org.apa.pol.ser.qua.con.ProductionReadinessChecks] [,] [,,,] (main) ⚠️ Production readiness checks failed! Check the warnings below.
2025-04-22 18:12:11,351 WARN [org.apa.pol.ser.qua.con.ProductionReadinessChecks] [,] [,,,] (main) - The realm context resolver is configured to map requests without a realm header to the default realm. Offending configuration option: 'polaris.realm-context.require-header'.
2025-04-22 18:12:11,352 WARN [org.apa.pol.ser.qua.con.ProductionReadinessChecks] [,] [,,,] (main) - The current metastore is intended for tests only. Offending configuration option: 'polaris.persistence.type'.
2025-04-22 18:12:11,352 WARN [org.apa.pol.ser.qua.con.ProductionReadinessChecks] [,] [,,,] (main) - A public key file wasn't provided and will be generated. Offending configuration option: 'polaris.authentication.token-broker.rsa-key-pair.public-key-file'.
2025-04-22 18:12:11,353 WARN [org.apa.pol.ser.qua.con.ProductionReadinessChecks] [,] [,,,] (main) - The current persistence unit (jdbc:h2) is intended for tests only. Offending configuration option: 'polaris.persistence.eclipselink.configuration-file'.
2025-04-22 18:12:11,353 WARN [org.apa.pol.ser.qua.con.ProductionReadinessChecks] [,] [,,,] (main) Refer to https://polaris.apache.org/in-dev/unreleased/configuring-polaris-for-production for more information.
2025-04-22 18:12:11,542 INFO [org.apa.pol.cor.per.LocalPolarisMetaStoreManagerFactory] [,] [,,,] (main) Bootstrapped realm POLARIS using preset credentials.
2025-04-22 18:12:11,704 INFO [io.quarkus] [,] [,,,] (main) Apache Polaris Server (incubating) 0.10.0-beta-incubating-SNAPSHOT on JVM (powered by Quarkus 3.21.2) started in 3.004s. Listening on: http://0.0.0.0:8181. Management interface listening on http://0.0.0.0:8182.
2025-04-22 18:12:11,705 INFO [io.quarkus] [,] [,,,] (main) Profile prod activated.
2025-04-22 18:12:11,706 INFO [io.quarkus] [,] [,,,] (main) Installed features: [cdi, hibernate-validator, micrometer, opentelemetry, reactive-routes, rest, rest-jackson, security, smallrye-context-propagation, smallrye-health, vertx]
```
The output says:
```
Bootstrapped realm POLARIS using preset credentials.
```
### Expected Behavior
Expecting output to contain a string of the form:
```
realm: POLARIS root principal credentials: <client-id>:<client-secret>
```
### Additional context
I am on Ubuntu 24.04, using OpenJDK 21.
### System information
OS: Ubuntu 24.04
Polaris Catalog Version: 0.10.0-beta (64b46f1e9c178d517433d14f8652daff31e6834f)
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@polaris.apache.org.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] Credentials are not output to standard out when following Quickstart [polaris]
Posted by "owenowenisme (via GitHub)" <gi...@apache.org>.
owenowenisme commented on issue #1428:
URL: https://github.com/apache/polaris/issues/1428#issuecomment-2825031127
Even though the code commented that `// Credentials provided in the runtime env... no need to print `, but I actually doesnt saw credentials in runtime env.
Does `presetCredentials.containsKey(realmId)` necessarily mean credentials is provided in runtime env?
If not, do we need to always print the default credentials or maybe add to quick start guide for this?
And also I'm willing to contribute!
https://github.com/apache/polaris/blob/1c6050be9c1fd2d7e25542d9848bf723cd9a055a/service/common/src/main/java/org/apache/polaris/service/persistence/InMemoryPolarisMetaStoreManagerFactory.java#L103-L131
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@polaris.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] Credentials are not output to standard out when following Quickstart [polaris]
Posted by "dimas-b (via GitHub)" <gi...@apache.org>.
dimas-b commented on issue #1428:
URL: https://github.com/apache/polaris/issues/1428#issuecomment-2825856464
> Does presetCredentials.containsKey(realmId) necessarily mean credentials is provided in runtime env?
ATM they come either from the `POLARIS_BOOTSTRAP_CREDENTIALS` OS environment variable or from `polaris.bootstrap.credentials` system property (the latter can be considered "runtime environment" too, I guess :) )
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@polaris.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] Credentials are not output to standard out when following Quickstart [polaris]
Posted by "owenowenisme (via GitHub)" <gi...@apache.org>.
owenowenisme commented on issue #1428:
URL: https://github.com/apache/polaris/issues/1428#issuecomment-2828032392
@dimas-b
So should we also remove setting default credentials for them in this case? Just to make sure our thoughts align.
https://github.com/apache/polaris/blob/6308ba02e89236a72e8661ca0e4d7494ee3ff946/quarkus/server/build.gradle.kts#L82
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@polaris.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] Credentials are not output to standard out when following Quickstart [polaris]
Posted by "owenowenisme (via GitHub)" <gi...@apache.org>.
owenowenisme commented on issue #1428:
URL: https://github.com/apache/polaris/issues/1428#issuecomment-2825893866
I think that makes sense.
May I open a pull request to add document and remove the print credentials part?
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@polaris.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] Credentials are not output to standard out when following Quickstart [polaris]
Posted by "adnanhemani (via GitHub)" <gi...@apache.org>.
adnanhemani commented on issue #1428:
URL: https://github.com/apache/polaris/issues/1428#issuecomment-2829027020
Made the change here, please review: https://github.com/apache/polaris/pull/1452
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@polaris.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] Credentials are not output to standard out when following Quickstart [polaris]
Posted by "dimas-b (via GitHub)" <gi...@apache.org>.
dimas-b commented on issue #1428:
URL: https://github.com/apache/polaris/issues/1428#issuecomment-2825867439
When using `./gradlew run` the default creds come from https://github.com/apache/polaris/blob/6308ba02e89236a72e8661ca0e4d7494ee3ff946/quarkus/server/build.gradle.kts#L82
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@polaris.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] Credentials are not output to standard out when following Quickstart [polaris]
Posted by "dimas-b (via GitHub)" <gi...@apache.org>.
dimas-b commented on issue #1428:
URL: https://github.com/apache/polaris/issues/1428#issuecomment-2827941834
@owenowenisme : Contributions are always welcome 👍
However, if we remove the printing of auto-generated credentials, I believe we ought to fail server startup in that case (to prevent accidentally running into a locked out admin situation).
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@polaris.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] Credentials are not output to standard out when following Quickstart [polaris]
Posted by "dimas-b (via GitHub)" <gi...@apache.org>.
dimas-b commented on issue #1428:
URL: https://github.com/apache/polaris/issues/1428#issuecomment-2828069101
I do not have a strong opinion on that one... @adutra WDYT?
Maybe we could print something out from the build script in that case?
(TBH, I do not use `./gradlew run` personally, I prefer direct `java -jar ...`)
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@polaris.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] Credentials are not output to standard out when following Quickstart [polaris]
Posted by "flyrain (via GitHub)" <gi...@apache.org>.
flyrain commented on issue #1428:
URL: https://github.com/apache/polaris/issues/1428#issuecomment-2825100646
IIUC, we made the decision that printing credentials isn't necessary as they are part of configuration. In that case, we just need to update the doc. cc @eric-maynard @adutra for more context.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@polaris.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] Credentials are not output to standard out when following Quickstart [polaris]
Posted by "owenowenisme (via GitHub)" <gi...@apache.org>.
owenowenisme commented on issue #1428:
URL: https://github.com/apache/polaris/issues/1428#issuecomment-2824989842
I also encountered with this issue when trying out quick start (I was going to file an issue and saw yours), I had to go through the source code and explictly print the secret and finally get this.
```log
realm: POLARIS root principal credentials: root:secret
```
`root` & `secret`might be the default credentials.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@polaris.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] Credentials are not output to standard out when following Quickstart [polaris]
Posted by "adnanhemani (via GitHub)" <gi...@apache.org>.
adnanhemani commented on issue #1428:
URL: https://github.com/apache/polaris/issues/1428#issuecomment-2829017705
I can send a quick change to the Quickstart to make the admin credentials clear. @flyrain - do you want to create a new issue for the environment variables not being honored? That way we can close this ticket out when the original problem (Quickstart having incorrect information) is resolved?
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@polaris.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] Credentials are not output to standard out when following Quickstart [polaris]
Posted by "dimas-b (via GitHub)" <gi...@apache.org>.
dimas-b commented on issue #1428:
URL: https://github.com/apache/polaris/issues/1428#issuecomment-2825877145
Since this topic came up, I'd like to remove the printing of auto-generated secrets completely and let the server fail when running with in-memory storage and credentials are not configured.
IMHO, copying random secrets from STDOUT in local dev env. is inconvenient. I personally always use my own secrets which I provide via the `POLARIS_BOOTSTRAP_CREDENTIALS` env. variable.
Moreover, in production runs, the bootstrap command should be used to create the root principal and credentials will not be printed to server STDOUT anyway.
WDYT?
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@polaris.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] Credentials are not output to standard out when following Quickstart [polaris]
Posted by "adutra (via GitHub)" <gi...@apache.org>.
adutra commented on issue #1428:
URL: https://github.com/apache/polaris/issues/1428#issuecomment-2828383726
Indeed `.gradlew run` uses `root:secret`. I think it's just a matter of modifying the docs accordingly and telling users to use `root:secret`.
I agree with not printing any credentials in stdout.
But imho removing the ability to start the server with preset credentials will hurt the developer experience, let's keep that option available, at least some time.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@polaris.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] Credentials are not output to standard out when following Quickstart [polaris]
Posted by "flyrain (via GitHub)" <gi...@apache.org>.
flyrain commented on issue #1428:
URL: https://github.com/apache/polaris/issues/1428#issuecomment-2828617395
Agreed with @adutra — we shouldn't remove it. Instead, we should document the behavior (e.g., using `./gradlew run` with the preset credential `root:secret`) in the "Running Polaris as a Standalone Process" section of [the quickstart guide](https://polaris.apache.org/in-dev/unreleased/getting-started/quickstart/).
Also, I noticed that the environment variables don’t seem to be honored while running Polaris as a standalone process. It might be worth fixing that as well.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@polaris.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] Credentials are not output to standard out when following Quickstart [polaris]
Posted by "flyrain (via GitHub)" <gi...@apache.org>.
flyrain closed issue #1428: Credentials are not output to standard out when following Quickstart
URL: https://github.com/apache/polaris/issues/1428
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@polaris.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org