An Error Is Reported When opensearch-dashboards Is Connected to the OpenSearch Cluster

OpenSearch Dashboards
1

Versions (relevant - OpenSearch/Dashboard/Server OS/Browser):
opensearch-dashboards-2.13.0
opensearch-2.13.0

Describe the issue:
When plugins.security.ssl.http.enabled of opensearch is set to true and opensearch.ssl.verificationMode of opensearch-dashboards is set to certificate, opensearch-dashboards is successfully connected to the opensearch cluster.
If plugins.security.ssl.http.enabled is set to false and opensearch.ssl.verificationMode is set to none, opensearch-dashboards fails to connect to the OpenSearch cluster.

Configuration:
opensearch-dashboards config:

opensearch.hosts: ["http://192.168.101.196:9200","http://192.168.101.137:9200"]
server.host: "0.0.0.0"
server.port: 5601
i18n.locale: "zh-CN"
server.basePath: /opensearch-dashboards
server.rewriteBasePath: true
opensearch.username: "kibanaserver"
opensearch.requestHeadersAllowlist: [authorization, securitytenant, security_tenant, Authorization]
opensearch.ssl.verificationMode: none
opensearch_security.multitenancy.enabled: true
opensearch_security.multitenancy.tenants.preferred: [Private, Global]
opensearch_security.readonly_mode.roles: [kibana_read_only]
opensearch_security.cookie.secure: false
opensearch_security.auth.type: ['basicauth']

opensearch config:

cluster.initial_master_nodes: ["node-192.168.101.196","node-192.168.101.137"]
node.name: node-192.168.101.196
cluster.name: es-cluster
http.port: 9200
transport.port: 9300
discovery.seed_hosts: ["192.168.101.196:9300","192.168.101.137:9300"]
path.data: /home/opensearch/opensearch-2.13.0/data
path.logs: /home/opensearch/opensearch-2.13.0/logs
http.cors.enabled: true
http.host: 0.0.0.0
network.host: 192.168.101.196
indexing_pressure.memory.limit: 60%
indices.memory.index_buffer_size: 30%
thread_pool.write.queue_size: 1024
indices.breaker.total.limit: 90%
cluster.max_shards_per_node: 2500
plugins.security.disabled: false
plugins.security.ssl.http.enabled: false
plugins.security.ssl.transport.enabled: true
plugins.security.allow_unsafe_democertificates: true
plugins.security.allow_default_init_securityindex: true
plugins.security.ssl.transport.pemcert_filepath: /home/opensearch/opensearch-2.13.0/config/opensearch.pem
plugins.security.ssl.transport.pemkey_filepath: /home/opensearch/opensearch-2.13.0/config/opensearch-key.pem
plugins.security.ssl.transport.pemtrustedcas_filepath: /home/opensearch/opensearch-2.13.0/config/opensearch-ca.pem
plugins.security.ssl.transport.enforce_hostname_verification: false
plugins.security.ssl.transport.resolve_hostname: false
plugins.security.authcz.admin_dn:
  - 'CN=ECDN-Manage,OU=Huawei Cloud,O=Huawei,C=CN'
plugins.security.nodes_dn:
  - 'CN=ECDN-Manage,OU=Huawei Cloud,O=Huawei,C=CN'
plugins.security.audit.type: internal_opensearch
plugins.security.restapi.roles_enabled: ["all_access", "security_rest_api_access"]

Relevant Logs or Screenshots:

2

Hi @dp9527,

Looks like you are missing opensearch.password:

the default looks like this:


opensearch.username: kibanaserver
opensearch.password: kibanaserver

Best,
mj

4

I have tried that, but it didn’t work :joy: