Unable to Unassigned node left delayed timeout setup

OpenSearch
1

Good Day
i use the latest version of opensearch 2.13.0
and i was sad when i try to set the setting of cluster to node left delay and got error
{
“error”: {
“root_cause”: [
{
“type”: “security_exception”,
“reason”: “no permissions for and User [name=superadmin, backend_roles=[admin, all_access], requestedTenant=]”
}
],
“type”: “security_exception”,
“reason”: “no permissions for and User [name=superadmin, backend_roles=[admin, all_access], requestedTenant=]”
},
“status”: 403

Describe how to setup:

PUT _all/_settings
{
“settings”: {
“index.unassigned.node_left.delayed_timeout”: “7m”
}
}:

Relevant Logs or Screenshots:

2

Hi @therus000,

This index is not accessible by regular users (including admin with “ALL_ACCESS”), the only way to access it (search and update) is by using the admin certificate defined in opensearch.yml as admin_dn .

sample:

curl --insecure --cert ./config/kirk.pem --key ./config/kirk-key.pem --cacert ./config/root-ca.pem -H "Content-Type:application/json" -XPUT https://localhost:9200/_all/_settings -d '{"settings":{“index.unassigned.node_left.delayed_timeout”: “7m”}}'

Best,
mj

3

i didnt find any certs at this location. i use operator to deploy opensearch and in config i used generate tls and http true
image

4

i found cert at this location:
/usr/share/opensearch/config/tls-http
image

5

Hi @therus000,

You can generate your certificates by following the instructions here: Generating self-signed certificates - OpenSearch Documentation

best,
mj