Versions (relevant - OpenSearch/Dashboard/Server OS/Browser):
latest
Describe the issue: I am trying to use OpenSearch as backend storage for my Jaeger traces.
I am trying to run opensearch in AWS EKS using below manifest but getting error (org.opensearch.OpenSearchException: Empty file path for plugins.security.ssl.transport.truststore_filepath) My .pem and .cert file are in the same folder as my yaml file and running my kubectl apply command from same folder.
Configuration:
apiVersion: apps/v1
kind: StatefulSet
metadata:
name: opensearch
namespace: telemetry
labels:
app: opensearch
spec:
serviceName: opensearch
replicas: 1
selector:
matchLabels:
app: opensearch
template:
metadata:
labels:
app: opensearch
spec:
securityContext:
runAsUser: 1000
runAsGroup: 1000
fsGroup: 1000
containers:
- name: opensearch
image: opensearchproject/opensearch:latest
imagePullPolicy: Always
command:
- bin/opensearch
args:
- "-Ehttp.host=0.0.0.0"
- "-Etransport.host=127.0.0.1"
- "-Eplugins.security.ssl.transport.keystore_filepath=/usr/share/opensearch/config/certs/opensearch.key"
- "-Eplugins.security.ssl.transport.pemcert_filepath=/usr/share/opensearch/config/certs/opensearch.crt"
- "-Eplugins.security.ssl.transport.enabled=true"
volumeMounts:
- name: persistent-storage
mountPath: /data
- name: opensearch-certs
mountPath: /usr/share/opensearch/config/certs
readinessProbe:
exec:
command:
- curl
- --fail
- --silent
- --output
- /dev/null
- --user
- admin:admin
- localhost:9200
initialDelaySeconds: 60
periodSeconds: 600
timeoutSeconds: 600
resources:
requests:
memory: "10Gi"
cpu: "2"
limits:
memory: "10Gi"
cpu: "2"
volumes:
- name: persistent-storage
persistentVolumeClaim:
claimName: efs-claim
- name: opensearch-certs
secret:
secretName: opensearch-certs
Relevant Logs or Screenshots:
Caused by:
Caused by: org.opensearch.OpenSearchException: Empty file path for plugins.security.ssl.transport.truststore_filepath
at org.opensearch.security.ssl.DefaultSecurityKeyStore.checkPath(DefaultSecurityKeyStore.java:1121) ~[?:?]
at org.opensearch.security.ssl.DefaultSecurityKeyStore.resolve(DefaultSecurityKeyStore.java:274) ~[?:?]
at org.opensearch.security.ssl.DefaultSecurityKeyStore.initTransportSSLConfig(DefaultSecurityKeyStore.java:334) ~[?:?]
at org.opensearch.security.ssl.DefaultSecurityKeyStore.initSSLConfig(DefaultSecurityKeyStore.java:296) ~[?:?]
at org.opensearch.security.ssl.DefaultSecurityKeyStore.<init>(DefaultSecurityKeyStore.java:202) ~[?:?]
at org.opensearch.security.ssl.OpenSearchSecuritySSLPlugin.<init>(OpenSearchSecuritySSLPlugin.java:234) ~[?:?]
at org.opensearch.security.OpenSearchSecurityPlugin.<init>(OpenSearchSecurityPlugin.java:277) ~[?:?]
at jdk.internal.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method) ~[?:?]
at jdk.internal.reflect.NativeConstructorAccessorImpl.newInstance(NativeConstructorAccessorImpl.java:77) ~[?:?]
at jdk.internal.reflect.DelegatingConstructorAccessorImpl.newInstance(DelegatingConstructorAccessorImpl.java:45) ~[?:?]
at java.lang.reflect.Constructor.newInstanceWithCaller(Constructor.java:499) ~[?:?]
at java.lang.reflect.Constructor.newInstance(Constructor.java:480) ~[?:?]
at org.opensearch.plugins.PluginsService.loadPlugin(PluginsService.java:782) ~[opensearch-2.11.1.jar:2.11.1]
at org.opensearch.plugins.PluginsService.loadBundle(PluginsService.java:731) ~[opensearch-2.11.1.jar:2.11.1]
at org.opensearch.plugins.PluginsService.loadBundles(PluginsService.java:533) ~[opensearch-2.11.1.jar:2.11.1]
at org.opensearch.plugins.PluginsService.<init>(PluginsService.java:195) ~[opensearch-2.11.1.jar:2.11.1]
at org.opensearch.node.Node.<init>(Node.java:480) ~[opensearch-2.11.1.jar:2.11.1]
at org.opensearch.node.Node.<init>(Node.java:407) ~[opensearch-2.11.1.jar:2.11.1]
at org.opensearch.bootstrap.Bootstrap$5.<init>(Bootstrap.java:242) ~[opensearch-2.11.1.jar:2.11.1]
at org.opensearch.bootstrap.Bootstrap.setup(Bootstrap.java:242) ~[opensearch-2.11.1.jar:2.11.1]
at org.opensearch.bootstrap.Bootstrap.init(Bootstrap.java:404) ~[opensearch-2.11.1.jar:2.11.1]
at org.opensearch.bootstrap.OpenSearch.init(OpenSearch.java:180) ~[opensearch-2.11.1.jar:2.11.1]