New Cluster - Bootstrap only failing with missing OPENSEARCH_INITIAL_ADMIN_PASSWORD

OpenSearch
,
1

Versions (relevant - OpenSearch/Dashboard/Server OS/Browser): Latest Helm Charts
Describe the issue:
I’m setting up a new opensearch cluster in kubernetes but it’s failing with OPENSEARCH_INITIAL_ADMIN_PASSWORD missing only for the bootstrap pod. Other’s are getting scheduled properly. Attaching the yaml used for spinning up the manager and the cluster. It would be great if anyone could help me out on this

Configuration:

manager

manager:
  extraEnv:
  - name: OPENSEARCH_INITIAL_ADMIN_PASSWORD
    value: password

cluster

apiVersion: opensearch.opster.io/v1
kind: OpenSearchCluster
metadata:
  name: opensearchcluster
  namespace: opensearchns
spec:
  general:
    setVMMaxMapCount: true
    version: 2.14.0
    vendor: opensearch
    serviceName: opensearch
    monitoring:
     enable: true
  dashboards:
    enable: true
    version: 2.14.0
    opensearchCredentialsSecret:
      name: opensearch-dashboard-credentials
    env:
    - name: OPENSEARCH_INITIAL_ADMIN_PASSWORD
      value: password
    tls:
      enable: true
      generate: true
    replicas: 1
    labels:
      app: opensearch
    tolerations:
    - key: "app"
      operator: "Equal"
      value: "opensearch"
      effect: "NoExecute"
    affinity:
        nodeAffinity:
          requiredDuringSchedulingIgnoredDuringExecution:
            nodeSelectorTerms:
              - matchExpressions:
                  - key: node
                    operator: In
                    values:
                      - opensearch
    resources:
      requests:
          memory: "512Mi"
          cpu: "250m"
      limits:
          memory: "1Gi"
          cpu: "500m"
  confMgmt:
    smartScaler: true
  bootstrap:
    tolerations:
    - key: "app"
      operator: "Equal"
      value: "opensearch"
      effect: "NoExecute"
    affinity:
      nodeAffinity:
        requiredDuringSchedulingIgnoredDuringExecution:
          nodeSelectorTerms:
            - matchExpressions:
                - key: node
                  operator: In
                  values:
                    - opensearch
  nodePools:
    - component: masters
      pdb:
        enable: true
        minAvailable: 1
      tolerations:
      - key: "app"
        operator: "Equal"
        value: "opensearch"
        effect: "NoExecute"
      replicas: 3
      diskSize: "30Gi"
      env:
      - name: OPENSEARCH_INITIAL_ADMIN_PASSWORD
        value: password
      affinity:
        nodeAffinity:
          requiredDuringSchedulingIgnoredDuringExecution:
            nodeSelectorTerms:
              - matchExpressions:
                  - key: node
                    operator: In
                    values:
                      - opensearch
      resources:
         requests:
            memory: "512Mi"
            cpu: "250m"
         limits:
            memory: "2Gi"
            cpu: "500m"
      roles:
        - "cluster_manager"
        - "data"
    - component: nodes
      replicas: 3
      diskSize: "30Gi"
      tolerations:
      - key: "app"
        operator: "Equal"
        value: "opensearch"
        effect: "NoExecute"
      env:
      - name: OPENSEARCH_INITIAL_ADMIN_PASSWORD
        value: password
      affinity:
        nodeAffinity:
          requiredDuringSchedulingIgnoredDuringExecution:
            nodeSelectorTerms:
              - matchExpressions:
                  - key: node
                    operator: In
                    values:
                      - opensearch
      resources:
         requests:
            memory: "512Mi"
            cpu: "250m"
         limits:
            memory: "2Gi"
            cpu: "500m"
      roles:
        - "data"
    - component: coordinators
      replicas: 3
      diskSize: "8Gi"
      tolerations:
      - key: "app"
        operator: "Equal"
        value: "opensearch"
        effect: "NoExecute"
      env:
      - name: OPENSEARCH_INITIAL_ADMIN_PASSWORD
        value: password
      affinity:
        nodeAffinity:
          requiredDuringSchedulingIgnoredDuringExecution:
            nodeSelectorTerms:
              - matchExpressions:
                  - key: node
                    operator: In
                    values:
                      - opensearch
      resources:
         requests:
            memory: "512Mi"
            cpu: "250m"
         limits:
            memory: "2Gi"
            cpu: "500m"
      roles:
        - "ingest"

Relevant Logs or Screenshots:

opensearchcluster-bootstrap-0:

No custom admin password found. Please provide a password via the environment variable OPENSEARCH_INITIAL_ADMIN_PASSWORD.

opensearchcluster-coordinator-0:

[opensearchcluster-coordinators-0] Exception during establishing a SSL connection: javax.net.ssl.SSLHandshakeException: Received fatal alert: bad_certificate

2

This is fixed now, this required the below changes

extraEnv:
  - name: OPENSEARCH_INITIAL_ADMIN_PASSWORD
    value: password
manager:
  extraEnv:
  - name: OPENSEARCH_INITIAL_ADMIN_PASSWORD
    value: password

…

bootstrap:
    additionalConfig:
      OPENSEARCH_INITIAL_ADMIN_PASSWORD: password

…

but this is now failing with

Caused by: javax.net.ssl.SSLHandshakeException: Received fatal alert: bad_certificate

3

@nannan-a Did you resolve your issue? Your configuration is missing TLS config for node’s http and transport layers.