hi,
We created a shell script which call another shell script “security.sh” in this way:
docker-compose exec elasticsearch /usr/share/elasticsearch/security.sh
This is "security.sh "
#!/bin/bash
chown root:root plugins/opendistro_security/tools/securityadmin.sh
chmod +x plugins/opendistro_security/tools/securityadmin.sh
chown elasticsearch:root *.* config
until plugins/opendistro_security/tools/securityadmin.sh -r --fail-fast -cd plugins/opendistro_security/securityconfig -p 9300 -icl -key config/kirk-key.pem -cert config/kirk.pem -cacert config/root-ca.pem -nhnv; do
sleep 3
done
when we launch the script we get:
roberto@ddserver:~/docker/ldapor$ ./update.sh
Open Distro Security Admin v6
Will connect to localhost:9300 ... done
Elasticsearch Version: 6.7.1
Open Distro Security Version: 0.9.0.0
Connected as CN=kirk,OU=client,O=client,L=test,C=de
Fail-fast is activated
Contacting elasticsearch cluster 'elasticsearch' and wait for YELLOW clusterstate ...
Clustername: docker-cluster
Clusterstate: GREEN
Number of nodes: 1
Number of data nodes: 1
.opendistro_security index already exists, so we do not need to create one.
Will retrieve 'security/config' into plugins/opendistro_security/securityconfig/config_2019-Jul-05_07-58-20.yml
SUCC: Configuration for 'config' stored in plugins/opendistro_security/securityconfig/config_2019-Jul-05_07-58-20.yml
Will retrieve 'security/roles' into plugins/opendistro_security/securityconfig/roles_2019-Jul-05_07-58-20.yml
SUCC: Configuration for 'roles' stored in plugins/opendistro_security/securityconfig/roles_2019-Jul-05_07-58-20.yml
Will retrieve 'security/rolesmapping' into plugins/opendistro_security/securityconfig/roles_mapping_2019-Jul-05_07-58-20.yml
SUCC: Configuration for 'rolesmapping' stored in plugins/opendistro_security/securityconfig/roles_mapping_2019-Jul-05_07-58-20.yml
Will retrieve 'security/internalusers' into plugins/opendistro_security/securityconfig/internal_users_2019-Jul-05_07-58-20.yml
SUCC: Configuration for 'internalusers' stored in plugins/opendistro_security/securityconfig/internal_users_2019-Jul-05_07-58-20.yml
Will retrieve 'security/actiongroups' into plugins/opendistro_security/securityconfig/action_groups_2019-Jul-05_07-58-20.yml
SUCC: Configuration for 'actiongroups' stored in plugins/opendistro_security/securityconfig/action_groups_2019-Jul-05_07-58-20.yml
which is right, but in the elasticsearch logs we get an ERROR even if we have successfully updated security.admin.sh
elasticsearch | [2019-07-05T07:58:04,184][INFO ][o.e.c.r.a.AllocationService] [MQwVXhC] Cluster health status changed from [YELLOW] to [GREEN] (reason: [shards started [[.opendistro_security][0]] ...]).
elasticsearch | [2019-07-05T07:58:04,206][INFO ][c.a.o.s.s.ConfigHelper ] [MQwVXhC] Will update 'config' with /usr/share/elasticsearch/plugins/opendistro_security/securityconfig/config.yml
elasticsearch | [2019-07-05T07:58:04,445][INFO ][o.e.c.m.MetaDataMappingService] [MQwVXhC] [.opendistro_security/KpEGLRPURtisNvMuUZnGwQ] create_mapping [security]
elasticsearch | [2019-07-05T07:58:04,679][INFO ][c.a.o.s.s.ConfigHelper ] [MQwVXhC] Will update 'roles' with /usr/share/elasticsearch/plugins/opendistro_security/securityconfig/roles.yml
elasticsearch | [2019-07-05T07:58:04,730][INFO ][o.e.c.m.MetaDataMappingService] [MQwVXhC] [.opendistro_security/KpEGLRPURtisNvMuUZnGwQ] update_mapping [security]
elasticsearch | [2019-07-05T07:58:04,805][INFO ][c.a.o.s.s.ConfigHelper ] [MQwVXhC] Will update 'rolesmapping' with /usr/share/elasticsearch/plugins/opendistro_security/securityconfig/roles_mapping.yml
elasticsearch | [2019-07-05T07:58:04,833][INFO ][o.e.c.m.MetaDataMappingService] [MQwVXhC] [.opendistro_security/KpEGLRPURtisNvMuUZnGwQ] update_mapping [security]
elasticsearch | [2019-07-05T07:58:04,913][INFO ][c.a.o.s.s.ConfigHelper ] [MQwVXhC] Will update 'internalusers' with /usr/share/elasticsearch/plugins/opendistro_security/securityconfig/internal_users.yml
elasticsearch | [2019-07-05T07:58:04,932][INFO ][o.e.c.m.MetaDataMappingService] [MQwVXhC] [.opendistro_security/KpEGLRPURtisNvMuUZnGwQ] update_mapping [security]
elasticsearch | [2019-07-05T07:58:05,042][INFO ][c.a.o.s.s.ConfigHelper ] [MQwVXhC] Will update 'actiongroups' with /usr/share/elasticsearch/plugins/opendistro_security/securityconfig/action_groups.yml
elasticsearch | [2019-07-05T07:58:05,074][INFO ][o.e.c.m.MetaDataMappingService] [MQwVXhC] [.opendistro_security/KpEGLRPURtisNvMuUZnGwQ] update_mapping [security]
elasticsearch | [2019-07-05T07:58:05,163][INFO ][c.a.o.s.c.IndexBaseConfigurationRepository] [MQwVXhC] Default config applied
elasticsearch | [2019-07-05T07:58:05,262][INFO ][c.a.o.s.c.IndexBaseConfigurationRepository] [MQwVXhC] Node 'MQwVXhC' initialized
elasticsearch | [2019-07-05T07:58:13,544][ERROR][c.a.o.s.a.BackendRegistry] [MQwVXhC] Not yet initialized (you may need to run securityadmin)
elasticsearch | [2019-07-05T07:58:44,405][ERROR][c.a.o.s.a.BackendRegistry] [MQwVXhC] Not yet initialized (you may need to run securityadmin)
0elasticsearch | [2019-07-05T07:59:15,198][ERROR][c.a.o.s.a.BackendRegistry] [MQwVXhC] Not yet initialized (you may need to run securityadmin)
elasticsearch | [2019-07-05T07:59:46,025][ERROR][c.a.o.s.a.BackendRegistry] [MQwVXhC] Not yet initialized (you may need to run securityadmin)
elasticsearch | [2019-07-05T08:00:16,834][ERROR][c.a.o.s.a.BackendRegistry] [MQwVXhC] Not yet initialized (you may need to run securityadmin)
elasticsearch | [2019-07-05T08:00:48,028][ERROR][c.a.o.s.a.BackendRegistry] [MQwVXhC] Not yet initialized (you may need to run securityadmin)
elasticsearch | [2019-07-05T08:01:18,914][ERROR][c.a.o.s.a.BackendRegistry] [MQwVXhC] Not yet initialized (you may need to run securityadmin)
What can we do?