Skip to content

Tribe Node fails to start with secure settings for xpack.security #32117

Closed
@tvernum

Description

@tvernum

If a node is configured as a tribe node, then we automatically copy each xpack.security.* setting from the root settings, to each of the tribe client settings (Security.addTribeSettings)

However, that fails if the xpack.security setting is a SecureSetting as Settings.Builder.copy cannot copy secure settings.
The error is a somewhat cryptic

Caused by: java.lang.IllegalArgumentException: source key not found in the source settings

Given Tribe is deprecated in 6.x and removed in 7, we don't want to do much here, but we don't want a situation where nodes fail to start, and the errors are unclear.

Possible solutions:

  1. Don't allow secure settings for xpack.security.* on tribe nodes. That is, in addTribeSettings fail if we find a secure setting (with a reasonable error message)
  2. Check & require that the tribe.xyz.xpack.security.* secure setting already exist in the keystore. That is if, xpack.security.transport.ssl.keystore.secure_password exists in the keystore, require that tribe.xyz.xpack.security.transport.ssl.keystore.secure_password also exist, and fail with a reasonble error message if it does not.

Metadata

Metadata

Assignees

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions