Opensearch Cannot apply default config (this is maybe not an error!)

OpenSearch
,
1

Versions (relevant - OpenSearch/Dashboard/Server OS/Browser):
versoin: helm - 2.10.0, image: 2.5.0

Hi Team,
can any help me with this error, why i am getting it.
Cannot apply default config (this is maybe not an error!)

Describe the issue:
Cannot apply default config (this is maybe not an error!) when i install it through helm chart.
“[o.o.s.c.ConfigurationLoaderSecurity7] [opensearch-cluster-master-0] Exception while retrieving configuration for [INTERNALUSERS, ACTIONGROUPS, CONFIG, ROLES, ROL │
│ ESMAPPING, TENANTS, NODESDN, WHITELIST, ALLOWLIST, AUDIT] (index=.opendistro_security)”

Configuration:

Relevant Logs or Screenshots:

image
image1848×771 86.4 KB

[o.o.s.c.ConfigurationLoaderSecurity7] [opensearch-cluster-master-0] Exception while retrieving configuration for [INTERNALUSERS, ACTIONGROUPS, CONFIG, ROLES, ROL │
│ ESMAPPING, TENANTS, NODESDN, WHITELIST, ALLOWLIST, AUDIT] (index=.opendistro_security)

2

And in my config security is enabled, PFA below.

cluster.name: opensearch-cluster
                  # Bind to all interfaces because we don't know what IP address Docker will assign to us.
                  network.host: 0.0.0.0
                  # Setting network.host to a non-loopback address enables the annoying bootstrap checks. "Single-node" mode disables them again.
                  # Implicitly done if ".singleNode" is set to "true".
                  # discovery.type: single-node
                  # Start OpenSearch Security Demo Configuration
                  # WARNING: revise all the lines below before you go into production
                  plugins:
                    security:
                      ssl:
                        transport:
                          pemcert_filepath: esnode.pem
                          pemkey_filepath: esnode-key.pem
                          pemtrustedcas_filepath: root-ca.pem
                          enforce_hostname_verification: false
                        http:
                          enabled: true
                          pemcert_filepath: esnode.pem
                          pemkey_filepath: esnode-key.pem
                          pemtrustedcas_filepath: root-ca.pem
                      allow_unsafe_democertificates: true
                      allow_default_init_securityindex: true
                      authcz:
                        admin_dn:
                          - CN=kirk,OU=client,O=client,L=test,C=de
                      audit.type: internal_opensearch
                      enable_snapshot_restore_privilege: true
                      check_snapshot_restore_write_privileges: true
                      restapi:
                        roles_enabled: ["all_access", "security_rest_api_access"]
                      system_indices:
                        enabled: true
                        indices:
                          [
                            ".opendistro-alerting-config",
                            ".opendistro-alerting-alert*",
                            ".opendistro-anomaly-results*",
                            ".opendistro-anomaly-detector*",
                            ".opendistro-anomaly-checkpoints",
                            ".opendistro-anomaly-detection-state",
                            ".opendistro-reports-*",
                            ".opendistro-notifications-*",
                            ".opendistro-notebooks",
                            ".opendistro-asynchronous-search-response*",
                          ]
                  ######## End OpenSearch Security Demo Configuration ########
3

Hello @rakeshreddyrg09,

have you applied your security config using the securityadm?
https://opensearch.org/docs/latest/security/configuration/security-admin/

Might help with your problem. Also did this error just appear during normal operation or is this the first time the cluster was started?