Elastic seach is deployed on k8s env using elastic-operator. While trying to restore the old data using longhorn volume restoration method the pods came up and running, however there is an authentication error in the pod logs.
{"type": "server", "timestamp": "2025-05-06T16:14:15,351Z", "level": "WARN", "component": "o.e.x.s.a.RealmsAuthenticator", "cluster.name": "isna-es-cluster", "node.name": "isna-es-cluster-es-default-2", "message": "Authentication to realm file1 failed - Password authentication failed for elastic", "cluster.uuid": "WSR7bfC2RYW4Gx0isuWQ1w", "node.id": "pLbxXXoxQgK-MQL6JJYXeA" }
@team could you help on this.
When you restored the old data, you presumably restored it into a new cluster? Are you trying to use the old credentials from the previous cluster here?
If so, this is unlikely to work the credentials for the elastic user are stored in a Kubernetes secret that was probably deleted together with the old cluster.
You have to retrieve the new credentials as documented here Accessing services | Elastic Docs
1 Like