用户 [elastic] 未授权操作 [clustering/cluster]

Question

Elasticsearch 在我的集群中有三个节点，我使用的是插件 elasticsearch-carrot2，elastic 是 elasticsearch 中的超级用户。

我发送的请求如下：

curl -XPOST --user elastic:****  -H "Content-Type: application/json" 
    'http://ip:port/index/type/_search_with_clusters?pretty=true' -d '
 {
    "search_request": {
        "_source" : [
            "title",
            "body"
                   ],
        "query" : {
        "match" : {
          "title" : "something"
        }
    },
    "size": 100
          },
     "query_hint": "something",
       "field_mapping": {
          "title"  : ["_source.title", "_source.body"]
       }
 }'

不幸的是，我收到以下错误：

{
    "error" : {
        "root_cause" : [
            {
                "type" : "security_exception",
                "reason" : "action [clustering/cluster] is unauthorized 
                            for user [elastic]"
            }
                       ],
    "type" : "security_exception",
    "reason" : "action [clustering/cluster] is unauthorized for user 
                [elastic]"
               },
    "status" : 403
}

Answer 1

问题是因为该插件不适用于 XPack 安全性。

更多信息可以在本期看到：https://github.com/carrot2/elasticsearch-carrot2/issues/69

用户 [elastic] 未授权操作 [clustering/cluster]

action [clustering/cluster] is unauthorized for user [elastic]

elasticsearch

elasticsearch-x-pack