Hello,
I can’t deploy sg-helm/sg-helm to the Kubernetes cluster. Cluster version: 1.10.11 (GKE).
I tried to deploy it by executing helm install --name sg-elk --namespace elasticsearch sg-helm/sg-helm --version 6.5.4-24.0-17.0-beta3
Tried to deploy it from folder (helm install --name sg-elk --namespace elasticsearch search-guard-helm/sg-helm)
The result is: sgadmin can’t start.
PODs:
sg-elk-sg-helm-client-5865799544-cp67s 0/1 Running 0 1h
sg-elk-sg-helm-data-0 0/1 Running 0 1h
sg-elk-sg-helm-kibana-5f495fb8db-nrcql 0/1 Running 0 1h
sg-elk-sg-helm-master-0 1/1 Running 0 1h
sg-elk-sg-helm-sgadmin-d574489d-tk4rv 0/1 Init:CrashLoopBackOff 15 1h
Logs from sg-elk-sg-helm-sgadmin-d574489d-tk4rv, container: sgadmin-init
sg-elk-sg-helm-passwd-secret Opaque 4 1h
sg-elk-sg-helm-passwd-secret exists
Executing sgadmin to update the configs …
Search Guard Admin v6
Will connect to sg-elk-sg-helm-discovery.elasticsearch.svc:9300 … done
ERR: An unexpected IllegalStateException occured: failed to load plugin class [com.floragunn.searchguard.SearchGuardPlugin]
Trace:
java.lang.IllegalStateException: failed to load plugin class [com.floragunn.searchguard.SearchGuardPlugin]
at org.elasticsearch.plugins.PluginsService.loadPlugin(PluginsService.java:607)
at org.elasticsearch.plugins.PluginsService.<init>(PluginsService.java:112)
at org.elasticsearch.client.transport.TransportClient.newPluginService(TransportClient.java:108)
at org.elasticsearch.client.transport.TransportClient.buildTemplate(TransportClient.java:133)
at org.elasticsearch.client.transport.TransportClient.<init>(TransportClient.java:273)
at com.floragunn.searchguard.tools.SearchGuardAdmin$TransportClientImpl.<init>(SearchGuardAdmin.java:890)
at com.floragunn.searchguard.tools.SearchGuardAdmin.main0(SearchGuardAdmin.java:445)
at com.floragunn.searchguard.tools.SearchGuardAdmin.main(SearchGuardAdmin.java:123)
Caused by: java.lang.reflect.InvocationTargetException
at java.base/jdk.internal.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method)
at java.base/jdk.internal.reflect.NativeConstructorAccessorImpl.newInstance(NativeConstructorAccessorImpl.java:62)
at java.base/jdk.internal.reflect.DelegatingConstructorAccessorImpl.newInstance(DelegatingConstructorAccessorImpl.java:45)
at java.base/java.lang.reflect.Constructor.newInstance(Constructor.java:490)
at org.elasticsearch.plugins.PluginsService.loadPlugin(PluginsService.java:598)
... 7 more
Caused by: ElasticsearchException[Unable to read /root/sgcerts/crt.pem (/root/sgcerts/crt.pem). Please make sure this files exists and is readable regarding to permissions. Property: searchguard.ssl.transport.pemcert_filepath]
at com.floragunn.searchguard.ssl.DefaultSearchGuardKeyStore.checkPath(DefaultSearchGuardKeyStore.java:809)
at com.floragunn.searchguard.ssl.DefaultSearchGuardKeyStore.resolve(DefaultSearchGuardKeyStore.java:210)
at com.floragunn.searchguard.ssl.DefaultSearchGuardKeyStore.initSSLConfig(DefaultSearchGuardKeyStore.java:325)
at com.floragunn.searchguard.ssl.DefaultSearchGuardKeyStore.<init>(DefaultSearchGuardKeyStore.java:151)
at com.floragunn.searchguard.ssl.SearchGuardSSLPlugin.<init>(SearchGuardSSLPlugin.java:193)
at com.floragunn.searchguard.SearchGuardPlugin.<init>(SearchGuardPlugin.java:212)
... 12 more
Result 255
Could you please help me with that error?