Using Credential Environment Variables to login

[tomateoooh]

Hi,

I am trying to use credential environment variables to log into the CLI. I set my CDP_ACCESS_KEY_ID and CDP_PRIVATE_KEY as two strings, as they are presented in the API Access Key:

I'm getting the following error:
cdpy.common.CdpError: CdpError(NoCredentialsError('Unable to locate CDP credentials: Private key file does not exist.'))

Which suggests to me that the code expects a path to a private key file. This seems odd to me, as a file is unnecessary when the token is available in the environment variable. Is this the intended behaviour? Using a file, rather than the string directly from the variable seems less secure as the credentials will be just available to read.

Thanks,
Tom

[bbreak]

Hi @tomateoooh ,

The CDP_ACCESS_KEY_ID and CDP_PRIVATE_KEY environment variables are, indeed, supposed to contain the access key ID and private key from your API access key by the Cloudera Management Console. I just tested with CDP CLI version 0.9.132, and the following bash commands worked:

export CDP_ACCESS_KEY_ID='<my access key ID here>'
export CDP_PRIVATE_KEY='<my private key here>'

You may want to make sure that you don't have a ~/.cdp/credentials file with blank values like you show in your screenshot, as that can prevent the CLI from using your environment variables as desired. If you don't want to store the credentials on disk, I recommend removing the whole [default] section from the credentials file, or remove the credentials file altogether.

[tomateoooh]

Hi bbreak,

Thanks very much for getting back to me. After a lot of experimentation, I managed to get it working as you described above. I also discovered what was going wrong. I had downloaded the credentials file from the CDP web GUI, then used the terminal cat command to print out the file contents, before copying them into Secrets Manager. I didn't realise that cat had appended a % character to the end of the private key string, so this was preventing it from hitting true on this if statement and meaning I got the reported error:

if Ed25519v1Auth.detect_private_key(private_key):
        private_key_value = private_key
    else:
        raise NoCredentialsError(
            err_msg='Private key file {} does not exist'.format(private_key))

Thanks for your response,
Tom

[bbreak]

Excellent! I'm glad to hear you got it sorted out, @tomateoooh . Please mark the issue closed if there isn't anything further needed.