Centos 7
Opensearch TGZ installation
Cant get cluster up and running if security enabled. Cluster start to successfully communicate when i switch security off.
the one and only error in logs which may be the root of problem is this on both nodes
WARNING: An illegal reflective access operation has occurred
WARNING: Illegal reflective access by org.opensearch.security.support.Base64Helper$DescriptorNameSetter (file:/home/opensearch/opensearch-1.0.0/plugins/opensearch-security/opensearch-security-1.0.0.0.jar) to field java.io.ObjectStreamClass.name
WARNING: Please consider reporting this to the maintainers of org.opensearch.security.support.Base64Helper$DescriptorNameSetter
WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations
WARNING: All illegal access operations will be denied in a future release
configs is like
cluster.name: elk-m
node.name: DB1
network.host: 10.0.0.32
http.port: 8200
transport.port: 8300
discovery.seed_hosts: ["10.0.0.33:8300","10.0.0.32:8300"]
cluster.initial_master_nodes: ["DB1", "DB2"]
plugins.security.ssl.transport.pemcert_filepath: node.pem
plugins.security.ssl.transport.pemkey_filepath: node-key.pem
plugins.security.ssl.transport.pemtrustedcas_filepath: root-ca.pem
plugins.security.ssl.transport.enforce_hostname_verification: false
plugins.security.ssl.http.enabled: true
plugins.security.ssl.http.pemcert_filepath: node.pem
plugins.security.ssl.http.pemkey_filepath: node-key.pem
plugins.security.ssl.http.pemtrustedcas_filepath: root-ca.pem
plugins.security.ssl.transport.resolve_hostname: false
plugins.security.allow_default_init_securityindex: true
plugins.security.authcz.admin_dn:
- "CN=admin,OU=DIT,O=org,L=Moscow,ST=Moscow,C=RU"
plugins.security.nodes_dn:
- 'CN=NODE1,OU=DIT,O=org,L=Moscow,ST=Moscow,C=RU'
- 'CN=NODE2,OU=DIT,O=org,L=Moscow,ST=Moscow,C=RU'
plugins.security.audit.type: internal_opensearch
plugins.security.enable_snapshot_restore_privilege: true
plugins.security.check_snapshot_restore_write_privileges: true
plugins.security.restapi.roles_enabled: ["all_access", "security_rest_api_access"]
plugins.security.system_indices.enabled: true
plugins.security.system_indices.indices: [".opendistro-alerting-config", ".opendistro-alerting-alert*", ".opendistro-anomaly-results*", ".opendistro-anomaly-detector*", ".opendistro-anomaly-checkpoints", ".opendistro-anomaly-detection-state", ".opendistro-reports-*", ".opendistro-notifications-*", ".opendistro-notebooks", ".opendistro-asynchronous-search-response*"]
node.max_local_storage_nodes: 3
the communication on tcp:8300 is successfull(TLS at least)
Same time on classic ports i have elk up and running as a charm.
Can someone help me understand how to debug this behaviour?