当其中一个弹性搜索 pod 因任何原因重新启动时,在 kibana 日志中我收到错误,即弹性用户无法进行身份验证。我找不到任何相关文件。任何帮助,将不胜感激。
我的 kibana 日志:
{"type":"error","@timestamp":"2021-11-02T19:33:54Z","tags":["warning","stats-collection"],"pid":1,"level ":"error","error":{"message":"[security_exception] 无法验证用户 [elastic],{ header={ WWW-Authenticate="Basic realm=\"security\" charset=\"UTF -8\"" } }","name":"Error","stack":"[security_exception] 无法验证用户 [elastic],{ header={ WWW-Authenticate="Basic realm=\"security\ " charset=\"UTF-8\"" } } :: {"path":"/.kibana_task_manager/_search","query":{"ignore_unavailable":true},"body":"{\"sort\ ":[{\"task.runAt\":\"asc\"},{\"_id\":\"desc\"}],\"query\":{\"bool\":{\"must\":[{\"term\": {\"type\":\"task\"}},{\"bool\":{\"filter\":{\"term\":{\"_id\":\"Maps-maps_telemetry\" }}}}]}}}","statusCode":401,"response":"{\"error\":{\"root_cause\":[{\"type\":\"security_exception\",\ "reason\":\"验证用户失败[elastic]\",\"header\":{\"WWW-Authenticate\":\"Basic realm=\\\"security\\\" charset=\\ \"UTF-8\\\"\"}}],\"type\":\"security_exception\",\"reason\":\"无法验证用户[elastic]\",\"header\" :{\"WWW-验证\":\"Basic realm=\\\"security\\\" charset=\\\"UTF-8\\\"\"}},\"status\":401}","wwwAuthenticateDirective":"Basic realm= \"security\" charset=\"UTF-8\""}\n 在响应 (/usr/share/kibana/node_modules/elasticsearch/src/lib/transport.js:315:15)\n 在 checkRespForFailure (/ usr/share/kibana/node_modules/elasticsearch/src/lib/transport.js:274:7)\n 在 HttpConnector。(/usr/share/kibana/node_modules/elasticsearch/src/lib/connectors/http.js:166 :7)\n 在 IncomingMessage.wrapper (/usr/share/kibana/node_modules/elasticsearch/node_modules/lodash/lodash.js:4929:19)\n 在 IncomingMessage.emit (events.js:194:15)\n在 endReadableNT (_stream_readable.js:1103:12)\n 在 process._tickCallback (internal/process/next_tick.js:63:19)"},"message":"[security_exception] 无法验证用户 [elastic],{ header={ WWW-Authenticate="Basic realm=\"security\" charset=\"UTF-8\"" } }"}
现在我启用了 xpack.security.transport.ssl.enabled: true 然后我在 es 主节点中收到此错误
{“类型”:“服务器”,“时间戳”:“2021-11-03T19:17:30,962+0000”,“级别”:“警告”,“组件”:“oetTcpTransport”,“cluster.name”:“ elasticsearch”,“node.name”:“elasticsearch-master”,“cluster.uuid”:“hO1sgzRlTKWHl-jJVItUmA”,“node.id”:“PnVpoMi0TACfs_vJNQ1afQ”,“message”:“传输层捕获的异常 [Netty4TcpChannel{ localAddress=0.0.0.0/0.0.0.0:9300, remoteAddress=/SOMEIPADDRESS}], 关闭连接",