After securityadmin.sh opendistro_security index does not exist

Security
1

Hi @all,

after changing the internal_users.yml and reapplying the securityadmin.sh, elasticsearch fails to find the opendistro_security index on startup.

[2020-02-24T16:37:51,680][INFO ][c.a.o.s.OpenDistroSecurityPlugin] [odfe_log_1] Node started
[2020-02-24T16:37:51,680][INFO ][c.a.o.s.c.ConfigurationRepository] [odfe_log_1] Check if .opendistro_security index exists ...
[2020-02-24T16:37:51,680][INFO ][c.a.o.s.c.ConfigurationRepository] [odfe_log_1] .opendistro_security index does not exist yet, so we create a default config
[2020-02-24T16:37:51,681][INFO ][c.a.o.s.OpenDistroSecurityPlugin] [odfe_log_1] 4 Open Distro Security modules loaded so far: [Module [type=DLSFLS, implementing

Though the securityadmin.sh script runs through fine everytime:

root@odfe_log_1:/etc/elasticsearch/odfe-elastic-stack-production-certs# /usr/share/elasticsearch/plugins/opendistro_security/tools/securityadmin.sh -cacert /etc/odfe-elastic-production-certs/odfe-elastic-stack-production-certs/root-ca.pem -cert /etc/odfe-elastic-production-certs/odfe-elastic-stack-production-certs/admin.pem -key /etc/odfe-elastic-production-certs/odfe-elastic-stack-production-certs/admin-key.pem -cd /usr/share/elasticsearch/plugins/opendistro_security/securityconfig/ -nhnv -icl
WARNING: JAVA_HOME not set, will use /usr/bin/java
Open Distro Security Admin v7
Will connect to localhost:9300 ... done
Connected as CN=admin,OU=opendistro,O=odfe-elastic,C=DE
Elasticsearch Version: 7.3.2
Open Distro Security Version: 1.3.0.0
Contacting elasticsearch cluster 'elasticsearch' and wait for YELLOW clusterstate ...
Clustername: odfe-es-data-cluster
Clusterstate: YELLOW
Number of nodes: 1
Number of data nodes: 1
.opendistro_security index already exists, so we do not need to create one.
Populate config from /usr/share/elasticsearch/plugins/opendistro_security/securityconfig/
Will update '_doc/config' with /usr/share/elasticsearch/plugins/opendistro_security/securityconfig/config.yml
   SUCC: Configuration for 'config' created or updated
Will update '_doc/roles' with /usr/share/elasticsearch/plugins/opendistro_security/securityconfig/roles.yml
   SUCC: Configuration for 'roles' created or updated
Will update '_doc/rolesmapping' with /usr/share/elasticsearch/plugins/opendistro_security/securityconfig/roles_mapping.yml
   SUCC: Configuration for 'rolesmapping' created or updated
Will update '_doc/internalusers' with /usr/share/elasticsearch/plugins/opendistro_security/securityconfig/internal_users.yml
   SUCC: Configuration for 'internalusers' created or updated
Will update '_doc/actiongroups' with /usr/share/elasticsearch/plugins/opendistro_security/securityconfig/action_groups.yml
   SUCC: Configuration for 'actiongroups' created or updated
Will update '_doc/tenants' with /usr/share/elasticsearch/plugins/opendistro_security/securityconfig/tenants.yml
   SUCC: Configuration for 'tenants' created or updated
Done with success

Does anyone have an idea what is going wrong here?

2

Ok the issue was solved, I did not change anything significant. It appears it just takes a while until the new settings get active.