Skip to content

Elasticsearch can not initialize new cluster

Summary

During deploying new cluster from nothing it can not initilize because can tnot find data for internal_users action_groups etc.

Steps to reproduce

Run deploy cluster playbook from master version with ssl enabled.

Expected behavior

Cluster should deploy properly.

Actual behavior

Deploy of cluster fails becouse security admin can not create opendistor_security index.

Relevant logs and/or screenshots

[2019-09-09T12:52:20,705][INFO ][o.e.c.s.ClusterApplierService] [elastic02.dev.logs.apl.task.gda.pl] added {{elastic01.dev.logs.apl.task.gda.pl}{E58dLTWjRquP2oBLtDuTAw}{AEgK9H8CTLiVCKqHCJWu8w}{192.168.1.3}{192.168.1.3:9300},}, term: 3, version: 4, reason: ApplyCommitRequest{term=3, version=4, sourceNode={elastic03.dev.logs.apl.task.gda.pl}{9oPmBBjvTTWiV02XGd1K7g}{q-cfQ7g8Rwq3YcVy_1YFFA}{192.168.1.5}{192.168.1.5:9300}}
[2019-09-09T12:52:20,910][INFO ][c.a.o.s.c.ConfigurationRepository] [elastic02.dev.logs.apl.task.gda.pl] Index .opendistro_security created?: true
[2019-09-09T12:52:20,911][INFO ][c.a.o.s.s.ConfigHelper   ] [elastic02.dev.logs.apl.task.gda.pl] Will update 'CONFIG' with /usr/share/elasticsearch/plugins/opendistro_security/securityconfig/config.yml
[2019-09-09T12:52:22,035][INFO ][c.a.o.s.s.ConfigHelper   ] [elastic02.dev.logs.apl.task.gda.pl] Will update 'ROLES' with /usr/share/elasticsearch/plugins/opendistro_security/securityconfig/roles.yml
[2019-09-09T12:52:22,223][INFO ][c.a.o.s.s.ConfigHelper   ] [elastic02.dev.logs.apl.task.gda.pl] Will update 'ROLESMAPPING' with /usr/share/elasticsearch/plugins/opendistro_security/securityconfig/roles_mapping.yml
[2019-09-09T12:52:22,403][INFO ][c.a.o.s.s.ConfigHelper   ] [elastic02.dev.logs.apl.task.gda.pl] Will update 'INTERNALUSERS' with /usr/share/elasticsearch/plugins/opendistro_security/securityconfig/internal_users.yml
[2019-09-09T12:52:22,459][WARN ][c.a.o.s.c.ConfigurationLoaderSecurity7] [elastic02.dev.logs.apl.task.gda.pl] No data for internalusers while retrieving configuration for [INTERNALUSERS, ACTIONGROUPS, CONFIG, ROLES, ROLESMAPPING, TENANTS]  (index=.opendistro_security and type=_doc)
[2019-09-09T12:52:22,459][WARN ][c.a.o.s.c.ConfigurationLoaderSecurity7] [elastic02.dev.logs.apl.task.gda.pl] No data for actiongroups while retrieving configuration for [INTERNALUSERS, ACTIONGROUPS, CONFIG, ROLES, ROLESMAPPING, TENANTS]  (index=.opendistro_security and type=_doc)
[2019-09-09T12:52:22,529][WARN ][c.a.o.s.c.ConfigurationLoaderSecurity7] [elastic02.dev.logs.apl.task.gda.pl] No data for tenants while retrieving configuration for [INTERNALUSERS, ACTIONGROUPS, CONFIG, ROLES, ROLESMAPPING, TENANTS]  (index=.opendistro_security and type=_doc)
[2019-09-09T12:52:30,446][WARN ][c.a.o.s.c.ConfigurationLoaderSecurity7] [elastic02.dev.logs.apl.task.gda.pl] No data for internalusers while retrieving configuration for [INTERNALUSERS, ACTIONGROUPS, CONFIG, ROLES, ROLESMAPPING, TENANTS]  (index=.opendistro_security and type=_doc)
[2019-09-09T12:52:30,447][WARN ][c.a.o.s.c.ConfigurationLoaderSecurity7] [elastic02.dev.logs.apl.task.gda.pl] No data for actiongroups while retrieving configuration for [INTERNALUSERS, ACTIONGROUPS, CONFIG, ROLES, ROLESMAPPING, TENANTS]  (index=.opendistro_security and type=_doc)
[2019-09-09T12:52:30,464][WARN ][c.a.o.s.c.ConfigurationLoaderSecurity7] [elastic02.dev.logs.apl.task.gda.pl] No data for tenants while retrieving configuration for [INTERNALUSERS, ACTIONGROUPS, CONFIG, ROLES, ROLESMAPPING, TENANTS]  (index=.opendistro_security and type=_doc)
[2019-09-09T12:52:38,453][WARN ][c.a.o.s.c.ConfigurationLoaderSecurity7] [elastic02.dev.logs.apl.task.gda.pl] No data for internalusers while retrieving configuration for [INTERNALUSERS, ACTIONGROUPS, CONFIG, ROLES, ROLESMAPPING, TENANTS]  (index=.opendistro_security and type=_doc)
[2019-09-09T12:52:38,453][WARN ][c.a.o.s.c.ConfigurationLoaderSecurity7] [elastic02.dev.logs.apl.task.gda.pl] No data for actiongroups while retrieving configuration for [INTERNALUSERS, ACTIONGROUPS, CONFIG, ROLES, ROLESMAPPING, TENANTS]  (index=.opendistro_security and type=_doc)
[2019-09-09T12:52:38,467][WARN ][c.a.o.s.c.ConfigurationLoaderSecurity7] [elastic02.dev.logs.apl.task.gda.pl] No data for tenants while retrieving configuration for [INTERNALUSERS, ACTIONGROUPS, CONFIG, ROLES, ROLESMAPPING, TENANTS]  (index=.opendistro_security and type=_doc)

Possible fixes

Propably template with internal users contains deprecated fields names so it needs an update.