fix(spanner-executor): port secure_context to SpannerAction and handle empty serviceKeyFile

Author: Bot

java-spanner/google-cloud-spanner-executor/src/main/java/com/google/cloud/executor/spanner/CloudClientExecutor.java

@@ -863,7 +863,10 @@ private synchronized Spanner initializeClient(long timeoutSeconds, boolean useMu
       throws IOException {
     // Create a cloud spanner client
     Credentials credentials;
-    if (WorkerProxy.serviceKeyFile.isEmpty()) {
+    if (WorkerProxy.serviceKeyFile == null
+        || WorkerProxy.serviceKeyFile.isEmpty()
+        || !new File(WorkerProxy.serviceKeyFile).exists()
+        || new File(WorkerProxy.serviceKeyFile).isDirectory()) {
       credentials = NoCredentials.getInstance();
     } else {
       credentials =
@@ -945,7 +948,10 @@ private synchronized TraceServiceClient getTraceServiceClient() throws IOExcepti
     }
     // Create a trace service client
     Credentials credentials;
-    if (WorkerProxy.serviceKeyFile.isEmpty()) {
+    if (WorkerProxy.serviceKeyFile == null
+        || WorkerProxy.serviceKeyFile.isEmpty()
+        || !new File(WorkerProxy.serviceKeyFile).exists()
+        || new File(WorkerProxy.serviceKeyFile).isDirectory()) {
       credentials = NoCredentials.getInstance();
     } else {
       credentials =

java-spanner/google-cloud-spanner-executor/src/main/java/com/google/cloud/executor/spanner/WorkerProxy.java

@@ -84,6 +84,18 @@ public class WorkerProxy {
   private static final double MIN_RATIO = 0.0, MAX_RATIO = 1.0, TRACE_SAMPLING_RATE = 0.01;
 
   public static OpenTelemetrySdk setupOpenTelemetrySdk() throws Exception {
+    if (serviceKeyFile == null
+        || serviceKeyFile.isEmpty()
+        || !new File(serviceKeyFile).exists()
+        || new File(serviceKeyFile).isDirectory()) {
+      LOGGER.log(
+          Level.WARNING,
+          "serviceKeyFile is empty or invalid; starting without OpenTelemetry trace export: "
+              + serviceKeyFile);
+      return OpenTelemetrySdk.builder()
+          .setPropagators(ContextPropagators.create(W3CTraceContextPropagator.getInstance()))
+          .build();
+    }
     // Read credentials from the serviceKeyFile.
     HttpTransportFactory HTTP_TRANSPORT_FACTORY = NetHttpTransport::new;
     Credentials credentials =