拒绝访问您无权访问 Monitoring

Question

我有一个带有 3 个主节点和 2 个数据节点的 elasticSearch 集群。此外，我还有另一个带有 KIbana 和 ElasticSearch 的节点 (role=[] --coordinating-node)

集群正在运行，我可以启动 KIbana UI。但是，当我访问堆栈监控时看到以下错误

Access Denied You are not authorized to access Monitoring. To use Monitoring, you need the privileges granted by both the kibana_admin and monitoring_user roles.

If you are attempting to access a dedicated monitoring cluster, this might be because you are logged in as a user that is not configured on the monitoring cluster.

弹性搜索 8.1 基巴纳 8.1 我以弹性超级用户身份登录

Answer 1

您需要向节点添加 remote_cluster_client角色。

使用 ECK 的示例

apiVersion: elasticsearch.k8s.elastic.co/v1
kind: Elasticsearch
metadata:
  name: elasticsearch
  namespace: elastic-system
spec:
  version: 8.1.0
  nodeSets:
  - name: default
    config:
      node.roles: ["master", "data", "ingest", "ml", "remote_cluster_client"]

Answer 2

我通过在 es 集群节点中添加新角色 (remote_cluster_client) 解决了这个问题。

示例：

node.roles: [ master , data , remote_cluster_client ]

Answer 3

我就是这样解决的

在您的 kibana.yaml

中添加 monitoring.ui.ccs.enabled: false

来自此处的文档 https://www.elastic.co/guide/en/kibana/8.0/monitoring-settings-kb.html

monitoring.ui.ccs.enabled Set to true (default) to enable cross-cluster search of your monitoring data. >The remote_cluster_client role must exist on each node.

因此，如果您在每个节点上都没有 remote_cluster_client 角色，则需要设置为 false。

拒绝访问 您无权访问 Monitoring

Access Denied You are not authorized to access Monitoring

elasticsearch

kibana

拒绝访问您无权访问 Monitoring