Upgrading OpenSearch cluster on aws from Elasticsearch 6.8 OSS to OpenSearch 1.3 and 2.17

OpenSearch
,
1

Versions (relevant - OpenSearch/Dashboard/Server OS/Browser):
Elasticsearch 6.8 OSS to OpenSearch 1.3 and 2.17

Describe the issue:
I’m managing AWS OpenSearch cluster with indexes created in Elasticsearch 6.8 OSS which I successfully manage to reindex to OpenSearch 1.3 and 2.17 compatible versions.
When I run eligibility check for the update to 2.17, I’m getting:

Check eligibility - Failed

The following indices are not compatible with the target Elasticsearch version OS_2.17 - .opendistro-ism-config. Please refer to our documentation https://docs.aws.amazon.com/elasticsearch-service/latest/developerguide/es-version-migration.html for tips to address this issue
I’ve tried to reindex .opendistro-ism-config but it didn’t help, nether to I’m able to delete the index, because I’m getting

{
    "error": {
        "root_cause": [
            {
                "type": "security_exception",
                "reason": "no permissions for [] and User [name=administrator, backend_roles=[], requestedTenant=null]"
            }
        ],
        "type": "security_exception",
        "reason": "no permissions for [] and User [name=administrator, backend_roles=[], requestedTenant=null]"
    },
    "status": 403
}

How can mitigate the issue and upgrade the cluster to the latest openserach version?

Relevant Logs or Screenshots:

image
image3028×690 284 KB

2

For this, you need super admin privileges defined under plugins.security.authcz.admin_dn: (you`ll need to authenticate with your admin certs).

Note: Ensure you understand the risk while using your supper admin as some changes can be irreversible.

Best,
mj

1 Like
3

Hi @rozeto , Did you use Migration Assistant for Amazon OpenSearch for this?