Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Graylog-datanode stuck in provisioning certificate (step 3) #20757

Closed
mcury1985 opened this issue Oct 22, 2024 · 1 comment
Closed

Graylog-datanode stuck in provisioning certificate (step 3) #20757

mcury1985 opened this issue Oct 22, 2024 · 1 comment
Labels

Comments

@mcury1985
Copy link

I’m trying to migrate from opensearch 2.15.0 to Graylog-datanode
During migration attempt, Graylog-datanode stuck in provisioning certificate (step 3), it never goes beyond this step.

Graylog with SSL is working following the guide below, no problems at all, just can't migrate to graylod-datanode.
https://graylog.org/post/how-to-guide-securing-graylog-with-tls/

Expected Behavior

Migration from opensearch to graylog-datanode should work.

Current Behavior

It gets stuck in migration step 3, provisioning certificate to data nodes.

Possible Solution

I noticed that during the migration wizard, the transport address showed doesn't match my CNAME in my certificate, it gets the hostname https://rpi5:9200, already tried to change the hostname in datanode.conf but it doesn't seem to honor that setting.
A possible solution would be for the CNAME in transport address to match the bundled CA that I'm uploading.
Also tried to generate the CA in the Wizard, Graylog CA, but the same problem happens.

Steps to Reproduce (for bugs)

  1. In /etc/graylog/datanode/datanode.conf
    Configured using same values as Graylog server.conf for: password_secret, root_password_sha2.
  2. In /etc/graylog/datanode/datanode.conf opensearch_data_location I set with the same value of path.data found in /etc/opensearch/opensearch.yml.
  3. Run the migration wizard with any certificate settings (generate or upload CA) with the settings above.

Context

Can't migrate from opensearch 2.15 to graylod-datanode

Your Environment

  • Graylog Version: 6.1.0-15
  • Graylog-datanode Version: 6.1.0-15
  • Java Version: Temurin-17.0.12+7
  • OpenSearch Version: 2.15.0
  • MongoDB Version: 6.0.16
  • Operating System: Raspberry PI 5 8GB - Raspberry PI OS 64 bits based on Debian GNU/Linux 12 (bookworm) - up to date
  • Browser version: Firefox 131.0.3

Steps have you already taken to try and solve the problem?

Tried to use a self signed CA during the migration attempt.
Also tried to upload my own bundled CA, upload works but there is no improvement, I get stuck in the same step (Provisioning certificate do data nodes).
Tried to in datanode.conf, to set a hostname matching my CA, but it seems that transport address remains the same in the migration page.

@mcury1985 mcury1985 added the bug label Oct 22, 2024
@mcury1985
Copy link
Author

My bad, it was a permission issue in my opensearch data folder.
chown -R graylog-datanode:graylog-datanode /media/opensearch fixed the issue.
Thanks

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

No branches or pull requests

1 participant