Could not load credentials from any providers

[mjohncramer]

Need help to figure out how I can solve this. I have deployed the server in Azure Cloud, used docker-compose.yml and stack deploy.

{"category":"APP","level":"info","message":"[OPENCTI] Starting platform","timestamp":"2023-01-18T02:29:10.979Z","version":"5.5.2"} {"category":"APP","level":"info","message":"[OPENCTI] Checking dependencies statuses","timestamp":"2023-01-18T02:29:10.982Z","version":"5.5.2"} {"category":"APP","level":"info","message":"[SEARCH] Elasticsearch (8.5.3) client selected / runtime sorting enabled","timestamp":"2023-01-18T02:29:11.047Z","version":"5.5.2"} {"category":"APP","level":"info","message":"[CHECK] Search engine is alive","timestamp":"2023-01-18T02:29:11.049Z","version":"5.5.2"} {"category":"APP","error":{"context":{},"message":"Could not load credentials from any providers","name":"CredentialsProviderError","stack":"CredentialsProviderError: Could not load credentials from any providers\n at provider (/opt/opencti/build/src/database/file-storage.js:45:13)\n at /opt/opencti/build/node_modules/@aws-sdk/property-provider/dist-cjs/chain.js:11:28\n at processTicksAndRejections (node:internal/process/task_queues:95:5)\n at coalesceProvider (/opt/opencti/build/node_modules/@aws-sdk/property-provider/dist-cjs/memoize.js:14:24)\n at _Be.credentialProvider (/opt/opencti/build/node_modules/@aws-sdk/property-provider/dist-cjs/memoize.js:33:24)\n at _Be.signRequest (/opt/opencti/build/node_modules/@aws-sdk/signature-v4/dist-cjs/SignatureV4.js:86:29)\n at /opt/opencti/build/node_modules/@aws-sdk/middleware-signing/dist-cjs/middleware.js:16:18\n at /opt/opencti/build/node_modules/@aws-sdk/middleware-retry/dist-cjs/retryMiddleware.js:27:46\n at /opt/opencti/build/node_modules/@aws-sdk/middleware-logger/dist-cjs/loggerMiddleware.js:5:22\n at initializeBucket (/opt/opencti/build/src/database/file-storage.js:76:5)\n at checkSystemDependencies (/opt/opencti/build/src/initialization.js:132:3)\n at boot (/opt/opencti/build/src/boot.js:10:5)"},"level":"error","message":"[OPENCTI] Platform start fail","timestamp":"2023-01-18T02:29:11.088Z","version":"5.5.2"}

version: '3'

networks:

ext0:

external: true

services: redis: container_name: opencti-redis image: redis:7.0.6 ports:

• 6379:6379 restart: always volumes:
• redisdata:/data:rw elasticsearch: container_name: opencti-elasticsearch image: docker.elastic.co/elasticsearch/elasticsearch:8.5.3 volumes:
• esdata:/usr/share/elasticsearch/data:rw ports:
• 9200:9200/tcp
• 9300:9300/tcp environment:

  - bootstrap.memory_lock=true

  - http.cors.enabled=true

  - http.cors.allow-origin=*

  - ELASTICSEARCH_SSL_CA=/home/ansible/.opencti-ssl/opencti-play.pem

  Comment out the line below for single-node

• discovery.type=single-node

  Uncomment line below below for a cluster of multiple nodes

  - cluster.name=docker-cluster

• xpack.ml.enabled=false
• xpack.security.enabled=false

  - "ES_JAVA_OPTS=-Xms${ELASTIC_MEMORY_SIZE} -Xmx${ELASTIC_MEMORY_SIZE}"

  restart: always ulimits: memlock: soft: -1 hard: -1 nofile: soft: 65536 hard: 65536 opencti-kibana: container_name: opencti-kibana image: docker.elastic.co/kibana/kibana:8.5.3 environment:

• ELASTICSEARCH_HOSTS=http://opencti-elasticsearch:9200 restart: always ports:
• 5601:5601 depends_on:
• opencti-elasticsearch minio: container_name: opencti-minio image: minio/minio:RELEASE.2022-09-25T15-44-53Z volumes:
• s3data:/data:rw ports:
• 9001:9001/tcp
• 9000:9000/tcp
• 127.0.0.1:50001:9000/tcp environment: MINIO_ROOT_USER: ${MINIO_ROOT_USER} MINIO_ROOT_PASSWORD: ${MINIO_ROOT_PASSWORD}
  command: server /data --console-address ":9001" healthcheck: test: ["CMD", "curl", "-f", "http://localhost:9000/minio/health/live"] interval: 30s timeout: 20s retries: 3 restart: always rabbitmq: container_name: opencti-rabbitmq image: rabbitmq:3.11-management environment:
• RABBITMQ_DEFAULT_USER=${RABBITMQ_DEFAULT_USER}
• RABBITMQ_DEFAULT_PASS=${RABBITMQ_DEFAULT_PASS} volumes:
• amqpdata:/var/lib/rabbitmq:rw ports:
• 5672:5672
• 15672:15672 restart: always opencti: container_name: opencti-platform image: opencti/platform:5.5.2 environment:
• NODE_OPTIONS=--max-old-space-size=8096
• APP__PORT=8080
• APP__BASE_URL=${OPENCTI_BASE_URL}

  - APP__REACTIVE=true

• APPADMINEMAIL=${OPENCTI_ADMIN_EMAIL}
• APPADMINPASSWORD=${OPENCTI_ADMIN_PASSWORD}
• APPADMINTOKEN=${OPENCTI_ADMIN_TOKEN}
• APP__APP_LOGS__LOGS_LEVEL=debug

  - APP__LOGS=/var/log/opencti

• REDIS__HOSTNAME=redis
• REDIS__PORT=6379
• ELASTICSEARCH__URL=http://opencti-elasticsearch:9200

  - ELASTICSEARCH_SSL_CA=/home/ansible/.opencti-ssl/opencti-play.pem

• MINIO__ENDPOINT=minio
• MINIO__PORT=9001
• MINIO__USE_SSL=false
• MINIO__ACCESS_KEY=${MINIO_ROOT_USER}
• MINIO__SECRET_KEY=${MINIO_ROOT_PASSWORD}
• RABBITMQ__HOSTNAME=rabbitmq
• RABBITMQ__PORT=5672
• RABBITMQ__PORT_MANAGEMENT=15672
• RABBITMQ__MANAGEMENT_SSL=false
• RABBITMQ__USERNAME=${RABBITMQ_DEFAULT_USER}
• RABBITMQ__PASSWORD=${RABBITMQ_DEFAULT_PASS}
• SMTP__HOSTNAME=${SMTP_HOSTNAME}
• SMTP__PORT=25
• PROVIDERSLOCALSTRATEGY=LocalStrategy

  - APP__HTTPS_CERT__CA='["${SSL_ROOT_CA}"]'

  volumes:

• ${SSL_ROOT_CA}:/etc/ssl/certs/opencti.crt:ro networks: default: ports:
• 8080:8080/tcp
• 127.0.0.1:50000:8080/tcp labels:
• "ext0.enable=true"
• "ext0.http.routers.opencti.rule=Host(${DOCKER_IP})"
• "ext0.http.routers.opencti.entrypoints=https"
• "ext0.http.services.opencti.loadbalancer.server.port=8080" depends_on:
• redis
• elasticsearch
• minio
• rabbitmq restart: always deploy: placement: constraints:
  • "node.role==manager" worker: image: opencti/worker:5.5.2 environment:
• OPENCTI_URL=http://127.0.0.1:8080
• OPENCTI_TOKEN=${OPENCTI_ADMIN_TOKEN}
• WORKER_LOG_LEVEL=info depends_on:
• opencti deploy: mode: replicated replicas: 3 restart: always connector-export-file-stix: image: opencti/connector-export-file-stix:5.5.2 environment:
• OPENCTI_URL=http://opencti:8080
• OPENCTI_TOKEN=${OPENCTI_ADMIN_TOKEN}
• CONNECTOR_ID=${CONNECTOR_EXPORT_FILE_STIX_ID}
• CONNECTOR_TYPE=INTERNAL_EXPORT_FILE
• CONNECTOR_NAME=ExportFileStix2
• CONNECTOR_SCOPE=application/json
• CONNECTOR_CONFIDENCE_LEVEL=3 # From 0 (Unknown) to 100 (Fully trusted)
• CONNECTOR_LOG_LEVEL=info restart: always depends_on:
• opencti connector-export-file-csv: image: opencti/connector-export-file-csv:5.5.2 environment:
• OPENCTI_URL=http://opencti:8080
• OPENCTI_TOKEN=${OPENCTI_ADMIN_TOKEN}
• CONNECTOR_ID=${CONNECTOR_EXPORT_FILE_CSV_ID}
• CONNECTOR_TYPE=INTERNAL_EXPORT_FILE
• CONNECTOR_NAME=ExportFileCsv
• CONNECTOR_SCOPE=text/csv
• CONNECTOR_CONFIDENCE_LEVEL=3 # From 0 (Unknown) to 100 (Fully trusted)
• CONNECTOR_LOG_LEVEL=info restart: always depends_on:
• opencti connector-export-file-txt: image: opencti/connector-export-file-txt:5.5.2 environment:
• OPENCTI_URL=http://opencti:8080
• OPENCTI_TOKEN=${OPENCTI_ADMIN_TOKEN}
• CONNECTOR_ID=${CONNECTOR_EXPORT_FILE_TXT_ID}
• CONNECTOR_TYPE=INTERNAL_EXPORT_FILE
• CONNECTOR_NAME=ExportFileTxt
• CONNECTOR_SCOPE=text/plain
• CONNECTOR_CONFIDENCE_LEVEL=3 # From 0 (Unknown) to 100 (Fully trusted)
• CONNECTOR_LOG_LEVEL=info restart: always depends_on:
• opencti connector-import-file-stix: image: opencti/connector-import-file-stix:5.5.2 environment:
• OPENCTI_URL=http://opencti:8080
• OPENCTI_TOKEN=${OPENCTI_ADMIN_TOKEN}
• CONNECTOR_ID=${CONNECTOR_IMPORT_FILE_STIX_ID}
• CONNECTOR_TYPE=INTERNAL_IMPORT_FILE
• CONNECTOR_NAME=ImportFileStix
• CONNECTOR_VALIDATE_BEFORE_IMPORT=true
• CONNECTOR_SCOPE=application/json,text/xml
• CONNECTOR_AUTO=true
• CONNECTOR_CONFIDENCE_LEVEL=3 # From 0 (Unknown) to 100 (Fully trusted)
• CONNECTOR_LOG_LEVEL=info restart: always depends_on:
• opencti

  connector-import-file-pdf-observables:

  environment:

  - CONNECTOR_CONFIDENCE_LEVEL=3

  - CONNECTOR_ID=${CONNECTOR_IMPORT_FILE_PDF_ID}

  - CONNECTOR_LOG_LEVEL=info

  - CONNECTOR_NAME=ImportFilePdfObservables

  - CONNECTOR_SCOPE=application/pdf

  - CONNECTOR_TYPE=INTERNAL_IMPORT_FILE

  - OPENCTI_TOKEN=${OPENCTI_ADMIN_TOKEN}

  - OPENCTI_URL=http://opencti:8080

  - PDF_OBSERVABLES_CREATE_INDICATOR=False

  image: opencti/connector-import-file-pdf-observables:5.5.2

  restart: always

  depends_on:

  - opencti

  connector-import-document: image: opencti/connector-import-document:5.5.2 environment:

• OPENCTI_URL=http://opencti:8080
• OPENCTI_TOKEN=${OPENCTI_ADMIN_TOKEN}
• CONNECTOR_ID=${CONNECTOR_IMPORT_DOCUMENT_ID} # Valid UUIDv4
• CONNECTOR_TYPE=INTERNAL_IMPORT_FILE
• CONNECTOR_NAME=ImportDocument
• CONNECTOR_VALIDATE_BEFORE_IMPORT=true # Validate any bundle before import
• CONNECTOR_SCOPE=application/pdf,text/plain,text/html
• CONNECTOR_AUTO=true # Enable/disable auto-import of file
• CONNECTOR_ONLY_CONTEXTUAL=false # Only extract data related to an entity (a report, a threat actor, etc.)
• CONNECTOR_CONFIDENCE_LEVEL=3 # From 0 (Unknown) to 100 (Fully trusted)
• CONNECTOR_LOG_LEVEL=info
• IMPORT_DOCUMENT_CREATE_INDICATOR=true restart: always depends_on:
• opencti

volumes: esdata: s3data: redisdata: amqpdata:

ssldata:

[mjohncramer]

Everything else looks fine in the logs except the "Could not load credentials from any provider". I have no idea how to pass that ^^

[jfrpo1-iscte]

I have a similar issue :(