-
Type:
Bug
-
Status: Resolved
-
Priority:
Major
-
Resolution: Fixed
-
Affects Version/s: None
-
Component/s: AWS, Elasticsearch
-
Tags:
-
Backlog priority:1,000
-
Sprint:nxplatform #85, nxplatform #86
-
Story Points:5
When reindexing the entire repository using the BulkIndex operation and the managed alias is enabled, the operation fails with:
Caused by: org.elasticsearch.client.ResponseException: method [DELETE], host [https://vpc-harlan1-redacted.us-east-1.es.amazonaws.com], URI [/_all/_alias/nuxeo-write], status line [HTTP/1.1 403 Forbidden] {"error":{"root_cause":[{"type":"security_exception","reason":"no permissions for [] and User [name=harlan, backend_roles=[], requestedTenant=null]"}],"type":"security_exception","reason":"no permissions for [] and User [name=harlan, backend_roles=[], requestedTenant=null]"},"status":403}
Delete /_all/* is restricted on OpenSearch when the plugins.security is not disabled and raises a security exception
Instead of using the /_all which is restricted, the name of the index should be used: Delete nuxeo-0000/_alias/nuxeo-write.
- is related to
-
NXP-31837 Add an option to disable hostname verification during Elastic/Opensearch SSL handshake
-
- Resolved
-
