Creating a s3 snapshot repository fails for ES 6.2 and minio s3

Elastic Stack Elasticsearch
1

When trying to create a s3 snapshot repository i get the following error:

Request:

PUT _snapshot/minio
{
   "type": "s3",
   "settings": {
      "bucket": "elasticseach",
      "endpoint": "storage.mycompany.com",
      "protocol": "https"
   }
}

Response:

{
  "error": {
    "root_cause": [
      {
        "type": "blob_store_exception",
        "reason": "Failed to check if blob [master.dat-temp] exists"
      }
    ],
    "type": "blob_store_exception",
    "reason": "Failed to check if blob [master.dat-temp] exists",
    "caused_by": {
      "type": "amazon_s3_exception",
      "reason": "Forbidden (Service: Amazon S3; Status Code: 403; Error Code: 403 Forbidden; Request ID: 0F9C97A3A503F232; S3 Extended Request ID: Me5+81ViPJtmbvF433ijFWvT8VokOVKJBOA9VhT0v571JzQf1jKghoxMy5dwBxZhREoI0XfWcI0=)"
    }
  },
  "status": 500
}

We are hosting both elasticsearch and minio ourself and both services are secured using ssl certificates. The s3.client.default.access_key and s3.client.default.secret_key have been set on all elasticsearch cluster nodes. We checked the nginx logs (nginx acts a a proxy to our minio) and did not receive any request from elasticsearch during the repository creation which leads us to the conclusion that the problem is on the elasticseach side...

In the elasticseach logs the following shows up (had to cut out most of the stack trace due to character constraints):

[2018-12-18T16:32:24,195][INFO ][o.e.r.RepositoriesService] [1061] update repository [minio]
[2018-12-18T16:32:24,297][WARN ][r.suppressed             ] path: /_snapshot/minio, params: {repository=minio}
org.elasticsearch.common.blobstore.BlobStoreException: Failed to check if blob [master.dat-temp] exists
...

Caused by: com.amazonaws.services.s3.model.AmazonS3Exception: Forbidden (Service: Amazon S3; Status Code: 403; Error Code: 403 Forbidden; Request ID: BC97C6042F023FF0; S3 Extended Request ID: IaOVlIQ5wqELXOrShJ9mJygP5OwWMiLxAWYWSYjSmI9PpEpKyHbrv2tH3A/QM5TYGrzg5yziEbk=)
	...

Do you have an idea what the problem could be?

2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.