ERROR: Failed to determine the health of the cluster. , with exit code 69

Elastic Stack Elasticsearch
,
1

In /usr/share/elasticsearch/bin file i run "sudo ./elasticsearch-create-enrollment-token --scope kibana" command and i get this output:

03:26:10.736 [main] WARN  org.elasticsearch.common.ssl.DiagnosticTrustManager - failed to establish trust with server at [192.168.1.7]; the server provided a certificate with subject name [CN=zeymira], fingerprint [20414e765f5a0a7895c3d3ac31987a7082893385], no keyUsage and extendedKeyUsage [serverAuth]; the certificate is valid between [2023-11-28T19:34:41Z] and [2025-11-27T19:34:41Z] (current time is [2023-12-31T00:26:10.734022055Z], certificate dates are valid); the session uses cipher suite [TLS_AES_256_GCM_SHA384] and protocol [TLSv1.3]; the certificate has subject alternative names [IP:fe80:0:0:0:b9bc:f274:5403:3ea9,DNS:localhost,IP:192.168.1.104,IP:0:0:0:0:0:0:0:1,IP:127.0.0.1,IP:192.168.1.105,IP:fe80:0:0:0:75d5:a12b:1d99:f2f,DNS:zeymira]; the certificate is issued by [CN=Elasticsearch security auto-configuration HTTP CA]; the certificate is signed by (subject [CN=Elasticsearch security auto-configuration HTTP CA] fingerprint [2ca0f51b78a95e3ee9d16cc005646b149fe564e8] {trusted issuer}) which is self-issued; the [CN=Elasticsearch security auto-configuration HTTP CA] certificate is trusted in this ssl context ([xpack.security.http.ssl (with trust configuration: Composite-Trust{JDK-trusted-certs,StoreTrustConfig{path=certs/http.p12, password=<non-empty>, type=PKCS12, algorithm=PKIX}})])
java.security.cert.CertificateException: No subject alternative names matching IP address 192.168.1.7 found
	at sun.security.util.HostnameChecker.matchIP(HostnameChecker.java:160) ~[?:?]
	at sun.security.util.HostnameChecker.match(HostnameChecker.java:101) ~[?:?]
	at sun.security.ssl.X509TrustManagerImpl.checkIdentity(X509TrustManagerImpl.java:457) ~[?:?]
	at sun.security.ssl.X509TrustManagerImpl.checkIdentity(X509TrustManagerImpl.java:431) ~[?:?]
	at sun.security.ssl.X509TrustManagerImpl.checkTrusted(X509TrustManagerImpl.java:237) ~[?:?]
	at sun.security.ssl.X509TrustManagerImpl.checkServerTrusted(X509TrustManagerImpl.java:132) ~[?:?]
	at org.elasticsearch.common.ssl.DiagnosticTrustManager.checkServerTrusted(DiagnosticTrustManager.java:80) ~[?:?]
	at sun.security.ssl.CertificateMessage$T13CertificateConsumer.checkServerCerts(CertificateMessage.java:1302) ~[?:?]
	at sun.security.ssl.CertificateMessage$T13CertificateConsumer.onConsumeCertificate(CertificateMessage.java:1195) ~[?:?]
	at sun.security.ssl.CertificateMessage$T13CertificateConsumer.consume(CertificateMessage.java:1138) ~[?:?]
	at sun.security.ssl.SSLHandshake.consume(SSLHandshake.java:393) ~[?:?]
	at sun.security.ssl.HandshakeContext.dispatch(HandshakeContext.java:476) ~[?:?]
	at sun.security.ssl.HandshakeContext.dispatch(HandshakeContext.java:447) ~[?:?]
	at sun.security.ssl.TransportContext.dispatch(TransportContext.java:201) ~[?:?]
	at sun.security.ssl.SSLTransport.decode(SSLTransport.java:172) ~[?:?]
	at sun.security.ssl.SSLSocketImpl.decode(SSLSocketImpl.java:1506) ~[?:?]
	at sun.security.ssl.SSLSocketImpl.readHandshakeRecord(SSLSocketImpl.java:1421) ~[?:?]
	at sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:455) ~[?:?]
	at sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:426) ~[?:?]
	at sun.net.www.protocol.https.HttpsClient.afterConnect(HttpsClient.java:586) ~[?:?]
	at sun.net.www.protocol.https.AbstractDelegateHttpsURLConnection.connect(AbstractDelegateHttpsURLConnection.java:187) ~[?:?]
	at sun.net.www.protocol.https.HttpsURLConnectionImpl.connect(HttpsURLConnectionImpl.java:141) ~[?:?]
	at org.elasticsearch.xpack.core.common.socket.SocketAccess.lambda$doPrivileged$0(SocketAccess.java:42) ~[?:?]
	at java.security.AccessController.doPrivileged(AccessController.java:571) ~[?:?]
	at org.elasticsearch.xpack.core.common.socket.SocketAccess.doPrivileged(SocketAccess.java:41) ~[?:?]
	at org.elasticsearch.xpack.core.security.CommandLineHttpClient.execute(CommandLineHttpClient.java:178) ~[?:?]
	at org.elasticsearch.xpack.core.security.CommandLineHttpClient.execute(CommandLineHttpClient.java:112) ~[?:?]
	at org.elasticsearch.xpack.security.tool.BaseRunAsSuperuserCommand.checkClusterHealthWithRetries(BaseRunAsSuperuserCommand.java:214) ~[?:?]
	at org.elasticsearch.xpack.security.tool.BaseRunAsSuperuserCommand.execute(BaseRunAsSuperuserCommand.java:127) ~[?:?]
	at org.elasticsearch.common.cli.EnvironmentAwareCommand.execute(EnvironmentAwareCommand.java:54) ~[elasticsearch-8.11.3.jar:8.11.3]
	at org.elasticsearch.cli.Command.mainWithoutErrorHandling(Command.java:85) ~[elasticsearch-cli-8.11.3.jar:8.11.3]
	at org.elasticsearch.cli.Command.main(Command.java:50) ~[elasticsearch-cli-8.11.3.jar:8.11.3]
	at org.elasticsearch.launcher.CliToolLauncher.main(CliToolLauncher.java:64) ~[cli-launcher-8.11.3.jar:8.11.3]

ERROR: Failed to determine the health of the cluster. , with exit code 69

and here is my elasticsearch logs:

[2023-12-31T04:33:15,378][INFO ][o.a.l.i.v.PanamaVectorizationProvider] [zeymira] Java vector incubator API enabled; uses preferredBitSize=256
[2023-12-31T04:33:15,756][INFO ][o.e.n.Node               ] [zeymira] version[8.11.3], pid[14662], build[deb/64cf052f3b56b1fd4449f5454cb88aca7e739d9a/2023-12-08T11:33:53.634979452Z], OS[Linux/6.2.0-39-generic/amd64], JVM[Oracle Corporation/OpenJDK 64-Bit Server VM/21.0.1/21.0.1+12-29]
[2023-12-31T04:33:15,757][INFO ][o.e.n.Node               ] [zeymira] JVM home [/usr/share/elasticsearch/jdk], using bundled JDK [true]
[2023-12-31T04:33:15,757][INFO ][o.e.n.Node               ] [zeymira] JVM arguments [-Des.networkaddress.cache.ttl=60, -Des.networkaddress.cache.negative.ttl=10, -Djava.security.manager=allow, -XX:+AlwaysPreTouch, -Xss1m, -Djava.awt.headless=true, -Dfile.encoding=UTF-8, -Djna.nosys=true, -XX:-OmitStackTraceInFastThrow, -Dio.netty.noUnsafe=true, -Dio.netty.noKeySetOptimization=true, -Dio.netty.recycler.maxCapacityPerThread=0, -Dlog4j.shutdownHookEnabled=false, -Dlog4j2.disable.jmx=true, -Dlog4j2.formatMsgNoLookups=true, -Djava.locale.providers=SPI,COMPAT, --add-opens=java.base/java.io=org.elasticsearch.preallocate, -XX:+UseG1GC, -Djava.io.tmpdir=/tmp/elasticsearch-13324923362030457468, --add-modules=jdk.incubator.vector, -XX:+HeapDumpOnOutOfMemoryError, -XX:+ExitOnOutOfMemoryError, -XX:HeapDumpPath=/var/lib/elasticsearch, -XX:ErrorFile=/var/log/elasticsearch/hs_err_pid%p.log, -Xlog:gc*,gc+age=trace,safepoint:file=/var/log/elasticsearch/gc.log:utctime,level,pid,tags:filecount=32,filesize=64m, -Xms3895m, -Xmx3895m, -XX:MaxDirectMemorySize=2042626048, -XX:G1HeapRegionSize=4m, -XX:InitiatingHeapOccupancyPercent=30, -XX:G1ReservePercent=15, -Des.distribution.type=deb, --module-path=/usr/share/elasticsearch/lib, --add-modules=jdk.net, --add-modules=ALL-MODULE-PATH, -Djdk.module.main=org.elasticsearch.server]
[2023-12-31T04:33:19,352][INFO ][o.e.p.PluginsService     ] [zeymira] loaded module [repository-url]
[2023-12-31T04:33:19,354][INFO ][o.e.p.PluginsService     ] [zeymira] loaded module [rest-root]
[2023-12-31T04:33:19,354][INFO ][o.e.p.PluginsService     ] [zeymira] loaded module [x-pack-core]
[2023-12-31T04:33:19,354][INFO ][o.e.p.PluginsService     ] [zeymira] loaded module [x-pack-redact]
[2023-12-31T04:33:19,354][INFO ][o.e.p.PluginsService     ] [zeymira] loaded module [ingest-user-agent]
[2023-12-31T04:33:19,354][INFO ][o.e.p.PluginsService     ] [zeymira] loaded module [x-pack-async-search]
[2023-12-31T04:33:19,354][INFO ][o.e.p.PluginsService     ] [zeymira] loaded module [x-pack-monitoring]
[2023-12-31T04:33:19,354][INFO ][o.e.p.PluginsService     ] [zeymira] loaded module [repository-s3]
[2023-12-31T04:33:19,354][INFO ][o.e.p.PluginsService     ] [zeymira] loaded module [x-pack-analytics]
[2023-12-31T04:33:19,354][INFO ][o.e.p.PluginsService     ] [zeymira] loaded module [x-pack-ent-search]
[2023-12-31T04:33:19,355][INFO ][o.e.p.PluginsService     ] [zeymira] loaded module [x-pack-autoscaling]
[2023-12-31T04:33:19,355][INFO ][o.e.p.PluginsService     ] [zeymira] loaded module [lang-painless]
[2023-12-31T04:33:19,355][INFO ][o.e.p.PluginsService     ] [zeymira] loaded module [x-pack-ml]
[2023-12-31T04:33:19,355][INFO ][o.e.p.PluginsService     ] [zeymira] loaded module [lang-mustache]
[2023-12-31T04:33:19,355][INFO ][o.e.p.PluginsService     ] [zeymira] loaded module [legacy-geo]
[2023-12-31T04:33:19,355][INFO ][o.e.p.PluginsService     ] [zeymira] loaded module [x-pack-ql]
[2023-12-31T04:33:19,355][INFO ][o.e.p.PluginsService     ] [zeymira] loaded module [rank-rrf]
[2023-12-31T04:33:19,355][INFO ][o.e.p.PluginsService     ] [zeymira] loaded module [analysis-common]
[2023-12-31T04:33:19,355][INFO ][o.e.p.PluginsService     ] [zeymira] loaded module [transport-netty4]
[2023-12-31T04:33:19,356][INFO ][o.e.p.PluginsService     ] [zeymira] loaded module [aggregations]
[2023-12-31T04:33:19,356][INFO ][o.e.p.PluginsService     ] [zeymira] loaded module [ingest-common]
[2023-12-31T04:33:19,356][INFO ][o.e.p.PluginsService     ] [zeymira] loaded module [x-pack-identity-provider]
[2023-12-31T04:33:19,356][INFO ][o.e.p.PluginsService     ] [zeymira] loaded module [frozen-indices]
[2023-12-31T04:33:19,356][INFO ][o.e.p.PluginsService     ] [zeymira] loaded module [x-pack-shutdown]
[2023-12-31T04:33:19,356][INFO ][o.e.p.PluginsService     ] [zeymira] loaded module [x-pack-text-structure]
[2023-12-31T04:33:19,356][INFO ][o.e.p.PluginsService     ] [zeymira] loaded module [snapshot-repo-test-kit]
[2023-12-31T04:33:19,356][INFO ][o.e.p.PluginsService     ] [zeymira] loaded module [ml-package-loader]
[2023-12-31T04:33:19,356][INFO ][o.e.p.PluginsService     ] [zeymira] loaded module [kibana]
[2023-12-31T04:33:19,357][INFO ][o.e.p.PluginsService     ] [zeymira] loaded module [constant-keyword]
[2023-12-31T04:33:19,357][INFO ][o.e.p.PluginsService     ] [zeymira] loaded module [x-pack-logstash]
[2023-12-31T04:33:19,357][INFO ][o.e.p.PluginsService     ] [zeymira] loaded module [x-pack-ccr]
[2023-12-31T04:33:19,357][INFO ][o.e.p.PluginsService     ] [zeymira] loaded module [x-pack-graph]
[2023-12-31T04:33:19,357][INFO ][o.e.p.PluginsService     ] [zeymira] loaded module [x-pack-esql]
[2023-12-31T04:33:19,357][INFO ][o.e.p.PluginsService     ] [zeymira] loaded module [parent-join]
[2023-12-31T04:33:19,357][INFO ][o.e.p.PluginsService     ] [zeymira] loaded module [x-pack-enrich]
[2023-12-31T04:33:19,357][INFO ][o.e.p.PluginsService     ] [zeymira] loaded module [repositories-metering-api]
[2023-12-31T04:33:19,357][INFO ][o.e.p.PluginsService     ] [zeymira] loaded module [transform]
[2023-12-31T04:33:19,358][INFO ][o.e.p.PluginsService     ] [zeymira] loaded module [repository-azure]
[2023-12-31T04:33:19,358][INFO ][o.e.p.PluginsService     ] [zeymira] loaded module [repository-gcs]
[2023-12-31T04:33:19,358][INFO ][o.e.p.PluginsService     ] [zeymira] loaded module [spatial]
[2023-12-31T04:33:19,358][INFO ][o.e.p.PluginsService     ] [zeymira] loaded module [apm]
[2023-12-31T04:33:19,358][INFO ][o.e.p.PluginsService     ] [zeymira] loaded module [mapper-version]
[2023-12-31T04:33:19,358][INFO ][o.e.p.PluginsService     ] [zeymira] loaded module [mapper-extras]
[2023-12-31T04:33:19,358][INFO ][o.e.p.PluginsService     ] [zeymira] loaded module [x-pack-rollup]
[2023-12-31T04:33:19,358][INFO ][o.e.p.PluginsService     ] [zeymira] loaded module [percolator]
[2023-12-31T04:33:19,358][INFO ][o.e.p.PluginsService     ] [zeymira] loaded module [data-streams]
[2023-12-31T04:33:19,358][INFO ][o.e.p.PluginsService     ] [zeymira] loaded module [x-pack-stack]
[2023-12-31T04:33:19,359][INFO ][o.e.p.PluginsService     ] [zeymira] loaded module [rank-eval]
[2023-12-31T04:33:19,359][INFO ][o.e.p.PluginsService     ] [zeymira] loaded module [systemd]
[2023-12-31T04:33:19,359][INFO ][o.e.p.PluginsService     ] [zeymira] loaded module [reindex]
[2023-12-31T04:33:19,359][INFO ][o.e.p.PluginsService     ] [zeymira] loaded module [x-pack-security]
[2023-12-31T04:33:19,359][INFO ][o.e.p.PluginsService     ] [zeymira] loaded module [blob-cache]
[2023-12-31T04:33:19,359][INFO ][o.e.p.PluginsService     ] [zeymira] loaded module [searchable-snapshots]
[2023-12-31T04:33:19,359][INFO ][o.e.p.PluginsService     ] [zeymira] loaded module [x-pack-slm]
[2023-12-31T04:33:19,359][INFO ][o.e.p.PluginsService     ] [zeymira] loaded module [snapshot-based-recoveries]
[2023-12-31T04:33:19,359][INFO ][o.e.p.PluginsService     ] [zeymira] loaded module [x-pack-watcher]
[2023-12-31T04:33:19,359][INFO ][o.e.p.PluginsService     ] [zeymira] loaded module [old-lucene-versions]
[2023-12-31T04:33:19,360][INFO ][o.e.p.PluginsService     ] [zeymira] loaded module [x-pack-ilm]
[2023-12-31T04:33:19,360][INFO ][o.e.p.PluginsService     ] [zeymira] loaded module [x-pack-voting-only-node]
[2023-12-31T04:33:19,360][INFO ][o.e.p.PluginsService     ] [zeymira] loaded module [x-pack-deprecation]
[2023-12-31T04:33:19,360][INFO ][o.e.p.PluginsService     ] [zeymira] loaded module [x-pack-fleet]
[2023-12-31T04:33:19,360][INFO ][o.e.p.PluginsService     ] [zeymira] loaded module [x-pack-profiling]
[2023-12-31T04:33:19,360][INFO ][o.e.p.PluginsService     ] [zeymira] loaded module [x-pack-aggregate-metric]
[2023-12-31T04:33:19,360][INFO ][o.e.p.PluginsService     ] [zeymira] loaded module [x-pack-downsample]
[2023-12-31T04:33:19,360][INFO ][o.e.p.PluginsService     ] [zeymira] loaded module [ingest-geoip]
[2023-12-31T04:33:19,360][INFO ][o.e.p.PluginsService     ] [zeymira] loaded module [x-pack-write-load-forecaster]
[2023-12-31T04:33:19,360][INFO ][o.e.p.PluginsService     ] [zeymira] loaded module [inference]
[2023-12-31T04:33:19,360][INFO ][o.e.p.PluginsService     ] [zeymira] loaded module [search-business-rules]
[2023-12-31T04:33:19,361][INFO ][o.e.p.PluginsService     ] [zeymira] loaded module [ingest-attachment]
[2023-12-31T04:33:19,361][INFO ][o.e.p.PluginsService     ] [zeymira] loaded module [wildcard]
[2023-12-31T04:33:19,361][INFO ][o.e.p.PluginsService     ] [zeymira] loaded module [x-pack-sql]
[2023-12-31T04:33:19,361][INFO ][o.e.p.PluginsService     ] [zeymira] loaded module [unsigned-long]
[2023-12-31T04:33:19,361][INFO ][o.e.p.PluginsService     ] [zeymira] loaded module [x-pack-async]
[2023-12-31T04:33:19,361][INFO ][o.e.p.PluginsService     ] [zeymira] loaded module [runtime-fields-common]
[2023-12-31T04:33:19,361][INFO ][o.e.p.PluginsService     ] [zeymira] loaded module [vector-tile]
[2023-12-31T04:33:19,361][INFO ][o.e.p.PluginsService     ] [zeymira] loaded module [lang-expression]
[2023-12-31T04:33:19,361][INFO ][o.e.p.PluginsService     ] [zeymira] loaded module [x-pack-eql]
[2023-12-31T04:33:25,040][INFO ][o.e.e.NodeEnvironment    ] [zeymira] using [1] data paths, mounts [[/ (/dev/sda2)]], net usable_space [378.6gb], net total_space [438.5gb], types [ext4]
[2023-12-31T04:33:25,041][INFO ][o.e.e.NodeEnvironment    ] [zeymira] heap size [3.8gb], compressed ordinary object pointers [true]
[2023-12-31T04:33:25,116][INFO ][o.e.n.Node               ] [zeymira] node name [zeymira], node ID [DUX60HVlRjWub5dnXJfgKw], cluster name [elasticsearch], roles [data_hot, transform, data_content, data_warm, master, remote_cluster_client, data, data_cold, ingest, data_frozen, ml]
[2023-12-31T04:33:32,205][INFO ][o.e.x.m.p.l.CppLogMessageHandler] [zeymira] [controller/14689] [Main.cc@123] controller (64 bit): Version 8.11.3 (Build c16ff912638f0a) Copyright (c) 2023 Elasticsearch BV
[2023-12-31T04:33:35,982][INFO ][o.e.x.s.Security         ] [zeymira] Security is enabled
[2023-12-31T04:33:36,887][INFO ][o.e.x.s.a.s.FileRolesStore] [zeymira] parsed [0] roles from file [/etc/elasticsearch/roles.yml]
[2023-12-31T04:33:38,434][INFO ][o.e.x.s.InitialNodeSecurityAutoConfiguration] [zeymira] Auto-configuration will not generate a password for the elastic built-in superuser, as we cannot  determine if there is a terminal attached to the elasticsearch process. You can use the `bin/elasticsearch-reset-password` tool to set the password for the elastic user.
[2023-12-31T04:33:39,139][INFO ][o.e.x.p.ProfilingPlugin  ] [zeymira] Profiling is enabled
[2023-12-31T04:33:39,166][INFO ][o.e.x.p.ProfilingPlugin  ] [zeymira] profiling index templates will not be installed or reinstalled
[2023-12-31T04:33:42,600][INFO ][o.e.t.n.NettyAllocator   ] [zeymira] creating NettyAllocator with the following configs: [name=elasticsearch_configured, chunk_size=1mb, suggested_max_allocation_size=1mb, factors={es.unsafe.use_netty_default_chunk_and_page_size=false, g1gc_enabled=true, g1gc_region_size=4mb}]
[2023-12-31T04:33:42,625][INFO ][o.e.i.r.RecoverySettings ] [zeymira] using rate limit [40mb] with [default=40mb, read=0b, write=0b, max=0b]
[2023-12-31T04:33:42,669][INFO ][o.e.d.DiscoveryModule    ] [zeymira] using discovery type [multi-node] and seed hosts providers [settings]
[2023-12-31T04:33:43,775][INFO ][o.e.n.Node               ] [zeymira] initialized
[2023-12-31T04:33:43,776][INFO ][o.e.n.Node               ] [zeymira] starting ...
[2023-12-31T04:33:43,791][INFO ][o.e.x.s.c.f.PersistentCache] [zeymira] persistent cache index loaded
[2023-12-31T04:33:43,793][INFO ][o.e.x.d.l.DeprecationIndexingComponent] [zeymira] deprecation component started
[2023-12-31T04:33:43,861][INFO ][o.e.t.TransportService   ] [zeymira] publish_address {127.0.0.1:9300}, bound_addresses {[::1]:9300}, {127.0.0.1:9300}
[2023-12-31T04:33:44,029][WARN ][o.e.c.c.ClusterBootstrapService] [zeymira] this node is locked into cluster UUID [u8UWYp1QTauwJLRm9YdcqQ] but [cluster.initial_master_nodes] is set to [zeymira]; remove this setting to avoid possible data loss caused by subsequent cluster bootstrap attempts; for further information see https://www.elastic.co/guide/en/elasticsearch/reference/8.11/important-settings.html#initial_master_nodes
[2023-12-31T04:33:44,140][INFO ][o.e.c.s.MasterService    ] [zeymira] elected-as-master ([1] nodes joined in term 24)[_FINISH_ELECTION_, {zeymira}{DUX60HVlRjWub5dnXJfgKw}{DlFGJxZ3QVmPhymAOGI9xw}{zeymira}{127.0.0.1}{127.0.0.1:9300}{cdfhilmrstw}{8.11.3}{7000099-8500003} completing election], term: 24, version: 146, delta: master node changed {previous [], current [{zeymira}{DUX60HVlRjWub5dnXJfgKw}{DlFGJxZ3QVmPhymAOGI9xw}{zeymira}{127.0.0.1}{127.0.0.1:9300}{cdfhilmrstw}{8.11.3}{7000099-8500003}]}
[2023-12-31T04:33:44,172][INFO ][o.e.c.s.ClusterApplierService] [zeymira] master node changed {previous [], current [{zeymira}{DUX60HVlRjWub5dnXJfgKw}{DlFGJxZ3QVmPhymAOGI9xw}{zeymira}{127.0.0.1}{127.0.0.1:9300}{cdfhilmrstw}{8.11.3}{7000099-8500003}]}, term: 24, version: 146, reason: Publication{term=24, version=146}
[2023-12-31T04:33:44,195][INFO ][o.e.c.f.AbstractFileWatchingService] [zeymira] starting file watcher ...
[2023-12-31T04:33:44,199][INFO ][o.e.c.f.AbstractFileWatchingService] [zeymira] file settings service up and running [tid=77]
[2023-12-31T04:33:44,204][INFO ][o.e.h.AbstractHttpServerTransport] [zeymira] publish_address {192.168.1.7:9200}, bound_addresses {[::]:9200}
[2023-12-31T04:33:44,204][INFO ][o.e.c.c.NodeJoinExecutor ] [zeymira] node-join: [{zeymira}{DUX60HVlRjWub5dnXJfgKw}{DlFGJxZ3QVmPhymAOGI9xw}{zeymira}{127.0.0.1}{127.0.0.1:9300}{cdfhilmrstw}{8.11.3}{7000099-8500003}] with reason [completing election]
[2023-12-31T04:33:44,205][INFO ][o.e.n.Node               ] [zeymira] started {zeymira}{DUX60HVlRjWub5dnXJfgKw}{DlFGJxZ3QVmPhymAOGI9xw}{zeymira}{127.0.0.1}{127.0.0.1:9300}{cdfhilmrstw}{8.11.3}{7000099-8500003}{ml.max_jvm_size=4085252096, ml.config_version=11.0.0, xpack.installed=true, transform.config_version=10.0.0, ml.machine_memory=8169013248, ml.allocated_processors=8, ml.allocated_processors_double=8.0}
[2023-12-31T04:33:44,448][INFO ][o.e.l.ClusterStateLicenseService] [zeymira] license [279b626f-d4e0-4877-ab8c-7eaceaa5a95a] mode [basic] - valid
[2023-12-31T04:33:44,449][INFO ][o.e.x.s.a.Realms         ] [zeymira] license mode is [basic], currently licensed security realms are [reserved/reserved,file/default_file,native/default_native]
[2023-12-31T04:33:44,451][INFO ][o.e.g.GatewayService     ] [zeymira] recovered [0] indices into cluster_state
[2023-12-31T04:33:44,497][INFO ][o.e.h.n.s.HealthNodeTaskExecutor] [zeymira] Node [{zeymira}{DUX60HVlRjWub5dnXJfgKw}] is selected as the current health node.
[2023-12-31T04:37:41,467][WARN ][o.e.h.n.Netty4HttpServerTransport] [zeymira] received plaintext http traffic on an https channel, closing connection Netty4HttpChannel{localAddress=/[0:0:0:0:0:0:0:1]:9200, remoteAddress=/[0:0:0:0:0:0:0:1]:56088}
[2023-12-31T04:37:41,467][WARN ][o.e.h.n.Netty4HttpServerTransport] [zeymira] received plaintext http traffic on an https channel, closing connection Netty4HttpChannel{localAddress=/[0:0:0:0:0:0:0:1]:9200, remoteAddress=/[0:0:0:0:0:0:0:1]:56082}
[2023-12-31T04:37:41,469][WARN ][o.e.h.n.Netty4HttpServerTransport] [zeymira] received plaintext http traffic on an https channel, closing connection Netty4HttpChannel{localAddress=/[0:0:0:0:0:0:0:1]:9200, remoteAddress=/[0:0:0:0:0:0:0:1]:56098}
[2023-12-31T04:37:44,084][WARN ][o.e.h.n.Netty4HttpServerTransport] [zeymira] received plaintext http traffic on an https channel, closing connection Netty4HttpChannel{localAddress=/127.0.0.1:9200, remoteAddress=/127.0.0.1:42626}
[2023-12-31T04:37:44,086][WARN ][o.e.h.n.Netty4HttpServerTransport] [zeymira] received plaintext http traffic on an https channel, closing connection Netty4HttpChannel{localAddress=/127.0.0.1:9200, remoteAddress=/127.0.0.1:42632}
[2023-12-31T04:37:44,088][WARN ][o.e.h.n.Netty4HttpServerTransport] [zeymira] received plaintext http traffic on an https channel, closing connection Netty4HttpChannel{localAddress=/127.0.0.1:9200, remoteAddress=/127.0.0.1:42636}
[2023-12-31T04:37:45,114][WARN ][o.e.h.n.Netty4HttpServerTransport] [zeymira] received plaintext http traffic on an https channel, closing connection Netty4HttpChannel{localAddress=/127.0.0.1:9200, remoteAddress=/127.0.0.1:42650}
[2023-12-31T04:37:45,116][WARN ][o.e.h.n.Netty4HttpServerTransport] [zeymira] received plaintext http traffic on an https channel, closing connection Netty4HttpChannel{localAddress=/127.0.0.1:9200, remoteAddress=/127.0.0.1:42666}
[2023-12-31T04:37:45,117][WARN ][o.e.h.n.Netty4HttpServerTransport] [zeymira] received plaintext http traffic on an https channel, closing connection Netty4HttpChannel{localAddress=/127.0.0.1:9200, remoteAddress=/127.0.0.1:42670}
[2023-12-31T04:37:46,685][WARN ][o.e.h.n.Netty4HttpServerTransport] [zeymira] received plaintext http traffic on an https channel, closing connection Netty4HttpChannel{localAddress=/127.0.0.1:9200, remoteAddress=/127.0.0.1:42686}
[2023-12-31T04:37:46,685][WARN ][o.e.h.n.Netty4HttpServerTransport] [zeymira] received plaintext http traffic on an https channel, closing connection Netty4HttpChannel{localAddress=/127.0.0.1:9200, remoteAddress=/127.0.0.1:42702}
[2023-12-31T04:37:46,687][WARN ][o.e.h.n.Netty4HttpServerTransport] [zeymira] received plaintext http traffic on an https channel, closing connection Netty4HttpChannel{localAddress=/127.0.0.1:9200, remoteAddress=/127.0.0.1:42710}
[2023-12-31T04:38:55,769][WARN ][o.e.h.n.Netty4HttpServerTransport] [zeymira] received plaintext http traffic on an https channel, closing connection Netty4HttpChannel{localAddress=/127.0.0.1:9200, remoteAddress=/127.0.0.1:37344}
[2023-12-31T04:38:55,769][WARN ][o.e.h.n.Netty4HttpServerTransport] [zeymira] received plaintext http traffic on an https channel, closing connection Netty4HttpChannel{localAddress=/127.0.0.1:9200, remoteAddress=/127.0.0.1:37356}
[2023-12-31T04:38:55,770][WARN ][o.e.h.n.Netty4HttpServerTransport] [zeymira] received plaintext http traffic on an https channel, closing connection Netty4HttpChannel{localAddress=/127.0.0.1:9200, remoteAddress=/127.0.0.1:37366}
[2023-12-31T04:51:10,734][WARN ][o.e.h.n.Netty4HttpServerTransport] [zeymira] received plaintext http traffic on an https channel, closing connection Netty4HttpChannel{localAddress=/127.0.0.1:9200, remoteAddress=/127.0.0.1:43986}
[2023-12-31T04:51:10,735][WARN ][o.e.h.n.Netty4HttpServerTransport] [zeymira] received plaintext http traffic on an https channel, closing connection Netty4HttpChannel{localAddress=/127.0.0.1:9200, remoteAddress=/127.0.0.1:43998}
[2023-12-31T04:51:10,737][WARN ][o.e.h.n.Netty4HttpServerTransport] [zeymira] received plaintext http traffic on an https channel, closing connection Netty4HttpChannel{localAddress=/127.0.0.1:9200, remoteAddress=/127.0.0.1:44000}
[2023-12-31T04:51:11,771][WARN ][o.e.h.n.Netty4HttpServerTransport] [zeymira] received plaintext http traffic on an https channel, closing connection Netty4HttpChannel{localAddress=/127.0.0.1:9200, remoteAddress=/127.0.0.1:44004}
[2023-12-31T04:51:11,771][WARN ][o.e.h.n.Netty4HttpServerTransport] [zeymira] received plaintext http traffic on an https channel, closing connection Netty4HttpChannel{localAddress=/127.0.0.1:9200, remoteAddress=/127.0.0.1:44008}
[2023-12-31T04:51:11,773][WARN ][o.e.h.n.Netty4HttpServerTransport] [zeymira] received plaintext http traffic on an https channel, closing connection Netty4HttpChannel{localAddress=/127.0.0.1:9200, remoteAddress=/127.0.0.1:44018}

how can i solve this? i am trying to get enrollment token.

2

Per the docs Use the

--url option with hostname or IP that is listed as the SAN in that first line error message like

--url https://192.168.1.105:9200

3

I run the "sudo ./elasticsearch-create-enrollment-token --scope kibana --url https://192.168.1.7:9200
" command and i get the same error.

11:29:08.984 [main] WARN  org.elasticsearch.common.ssl.DiagnosticTrustManager - failed to establish trust with server at [192.168.1.7]; the server provided a certificate with subject name [CN=zeymira], fingerprint [20414e765f5a0a7895c3d3ac31987a7082893385], no keyUsage and extendedKeyUsage [serverAuth]; the certificate is valid between [2023-11-28T19:34:41Z] and [2025-11-27T19:34:41Z] (current time is [2023-12-31T08:29:08.981384352Z], certificate dates are valid); the session uses cipher suite [TLS_AES_256_GCM_SHA384] and protocol [TLSv1.3]; the certificate has subject alternative names [IP:fe80:0:0:0:b9bc:f274:5403:3ea9,DNS:localhost,IP:192.168.1.104,IP:0:0:0:0:0:0:0:1,IP:127.0.0.1,IP:192.168.1.105,IP:fe80:0:0:0:75d5:a12b:1d99:f2f,DNS:zeymira]; the certificate is issued by [CN=Elasticsearch security auto-configuration HTTP CA]; the certificate is signed by (subject [CN=Elasticsearch security auto-configuration HTTP CA] fingerprint [2ca0f51b78a95e3ee9d16cc005646b149fe564e8] {trusted issuer}) which is self-issued; the [CN=Elasticsearch security auto-configuration HTTP CA] certificate is trusted in this ssl context ([xpack.security.http.ssl (with trust configuration: Composite-Trust{JDK-trusted-certs,StoreTrustConfig{path=certs/http.p12, password=<non-empty>, type=PKCS12, algorithm=PKIX}})])
java.security.cert.CertificateException: No subject alternative names matching IP address 192.168.1.7 found
	at sun.security.util.HostnameChecker.matchIP(HostnameChecker.java:160) ~[?:?]
	at sun.security.util.HostnameChecker.match(HostnameChecker.java:101) ~[?:?]
	at sun.security.ssl.X509TrustManagerImpl.checkIdentity(X509TrustManagerImpl.java:457) ~[?:?]
	at sun.security.ssl.X509TrustManagerImpl.checkIdentity(X509TrustManagerImpl.java:431) ~[?:?]
	at sun.security.ssl.X509TrustManagerImpl.checkTrusted(X509TrustManagerImpl.java:237) ~[?:?]
	at sun.security.ssl.X509TrustManagerImpl.checkServerTrusted(X509TrustManagerImpl.java:132) ~[?:?]
	at org.elasticsearch.common.ssl.DiagnosticTrustManager.checkServerTrusted(DiagnosticTrustManager.java:80) ~[?:?]
	at sun.security.ssl.CertificateMessage$T13CertificateConsumer.checkServerCerts(CertificateMessage.java:1302) ~[?:?]
	at sun.security.ssl.CertificateMessage$T13CertificateConsumer.onConsumeCertificate(CertificateMessage.java:1195) ~[?:?]
	at sun.security.ssl.CertificateMessage$T13CertificateConsumer.consume(CertificateMessage.java:1138) ~[?:?]
	at sun.security.ssl.SSLHandshake.consume(SSLHandshake.java:393) ~[?:?]
	at sun.security.ssl.HandshakeContext.dispatch(HandshakeContext.java:476) ~[?:?]
	at sun.security.ssl.HandshakeContext.dispatch(HandshakeContext.java:447) ~[?:?]
	at sun.security.ssl.TransportContext.dispatch(TransportContext.java:201) ~[?:?]
	at sun.security.ssl.SSLTransport.decode(SSLTransport.java:172) ~[?:?]
	at sun.security.ssl.SSLSocketImpl.decode(SSLSocketImpl.java:1506) ~[?:?]
	at sun.security.ssl.SSLSocketImpl.readHandshakeRecord(SSLSocketImpl.java:1421) ~[?:?]
	at sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:455) ~[?:?]
	at sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:426) ~[?:?]
	at sun.net.www.protocol.https.HttpsClient.afterConnect(HttpsClient.java:586) ~[?:?]
	at sun.net.www.protocol.https.AbstractDelegateHttpsURLConnection.connect(AbstractDelegateHttpsURLConnection.java:187) ~[?:?]
	at sun.net.www.protocol.https.HttpsURLConnectionImpl.connect(HttpsURLConnectionImpl.java:141) ~[?:?]
	at org.elasticsearch.xpack.core.common.socket.SocketAccess.lambda$doPrivileged$0(SocketAccess.java:42) ~[?:?]
	at java.security.AccessController.doPrivileged(AccessController.java:571) ~[?:?]
	at org.elasticsearch.xpack.core.common.socket.SocketAccess.doPrivileged(SocketAccess.java:41) ~[?:?]
	at org.elasticsearch.xpack.core.security.CommandLineHttpClient.execute(CommandLineHttpClient.java:178) ~[?:?]
	at org.elasticsearch.xpack.core.security.CommandLineHttpClient.execute(CommandLineHttpClient.java:112) ~[?:?]
	at org.elasticsearch.xpack.security.tool.BaseRunAsSuperuserCommand.checkClusterHealthWithRetries(BaseRunAsSuperuserCommand.java:214) ~[?:?]
	at org.elasticsearch.xpack.security.tool.BaseRunAsSuperuserCommand.execute(BaseRunAsSuperuserCommand.java:127) ~[?:?]
	at org.elasticsearch.common.cli.EnvironmentAwareCommand.execute(EnvironmentAwareCommand.java:54) ~[elasticsearch-8.11.3.jar:8.11.3]
	at org.elasticsearch.cli.Command.mainWithoutErrorHandling(Command.java:85) ~[elasticsearch-cli-8.11.3.jar:8.11.3]
	at org.elasticsearch.cli.Command.main(Command.java:50) ~[elasticsearch-cli-8.11.3.jar:8.11.3]
	at org.elasticsearch.launcher.CliToolLauncher.main(CliToolLauncher.java:64) ~[cli-launcher-8.11.3.jar:8.11.3]

ERROR: Failed to determine the health of the cluster. , with exit code 69

I wanna share my config file too.

# ======================== Elasticsearch Configuration =========================
#
# NOTE: Elasticsearch comes with reasonable defaults for most settings.
#       Before you set out to tweak and tune the configuration, make sure you
#       understand what are you trying to accomplish and the consequences.
#
# The primary way of configuring a node is via this file. This template lists
# the most important settings you may want to configure for a production cluster.
#
# Please consult the documentation for further information on configuration options:
# https://www.elastic.co/guide/en/elasticsearch/reference/index.html
#
# ---------------------------------- Cluster -----------------------------------
#
# Use a descriptive name for your cluster:
#
#cluster.name: my-application
#
# ------------------------------------ Node ------------------------------------
#
# Use a descriptive name for the node:
#
#node.name: node-1
#
# Add custom attributes to the node:
#
#node.attr.rack: r1
#
# ----------------------------------- Paths ------------------------------------
#
# Path to directory where to store the data (separate multiple locations by comma):
#
path.data: /var/lib/elasticsearch
#
# Path to log files:
#
path.logs: /var/log/elasticsearch
#
# ----------------------------------- Memory -----------------------------------
#
# Lock the memory on startup:
#
#bootstrap.memory_lock: true
#
# Make sure that the heap size is set to about half the memory available
# on the system and that the owner of the process is allowed to use this
# limit.
#
# Elasticsearch performs poorly when the system is swapping the memory.
#
# ---------------------------------- Network -----------------------------------
#
# By default Elasticsearch is only accessible on localhost. Set a different
# address here to expose this node on the network:
#
#network.host: 192.168.0.1
#
# By default Elasticsearch listens for HTTP traffic on the first free port it
# finds starting at 9200. Set a specific HTTP port here:
#
#http.port: 9200
#
# For more information, consult the network module documentation.
#
# --------------------------------- Discovery ----------------------------------
#
# Pass an initial list of hosts to perform discovery when this node is started:
# The default list of hosts is ["127.0.0.1", "[::1]"]
#
#discovery.seed_hosts: ["host1", "host2"]
#
# Bootstrap the cluster using an initial set of master-eligible nodes:
#
#cluster.initial_master_nodes: ["node-1", "node-2"]
#
# For more information, consult the discovery and cluster formation module documentation.
#
# ---------------------------------- Various -----------------------------------
#
# Allow wildcard deletion of indices:
#
#action.destructive_requires_name: false

#----------------------- BEGIN SECURITY AUTO CONFIGURATION -----------------------
#
# The following settings, TLS certificates, and keys have been automatically      
# generated to configure Elasticsearch security features on 28-11-2023 19:34:37
#
# --------------------------------------------------------------------------------

# Enable security features
xpack.security.enabled: true

xpack.security.enrollment.enabled: true

# Enable encryption for HTTP API client connections, such as Kibana, Logstash, and Agents
xpack.security.http.ssl:
  enabled: true
  keystore.path: certs/http.p12

# Enable encryption and mutual authentication between cluster nodes
xpack.security.transport.ssl:
  enabled: true
  verification_mode: certificate
  keystore.path: certs/transport.p12
  truststore.path: certs/transport.p12
# Create a new cluster with the current node only
# Additional nodes can still join the cluster later
cluster.initial_master_nodes: ["zeymira"]

# Allow HTTP API connections from anywhere
# Connections are encrypted and require user authentication
http.host: 0.0.0.0

# Allow other nodes to join the cluster from anywhere
# Connections are encrypted and mutually authenticated
#transport.host: 0.0.0.0

#----------------------- END SECURITY AUTO CONFIGURATION -------------------------

Idk what is the problem

4

192.168.1.7 isn't one of the SANs of the certificate:

No subject alternative names matching IP address 192.168.1.7 found
...
the certificate has subject alternative names [
  IP:fe80:0:0:0:b9bc:f274:5403:3ea9,
  DNS:localhost,
  IP:192.168.1.104,
  IP:0:0:0:0:0:0:0:1,
  IP:127.0.0.1,
  IP:192.168.1.105,
  IP:fe80:0:0:0:75d5:a12b:1d99:f2f,
  DNS:zeymira
]
5

I don't undersand what should i do. I've tried to "sudo ./elasticsearch-create-enrollment-token --scope kibana --url https://192.168.1.105:9200" command too but i get the same error again

ERROR: Failed to determine the health of the cluster. , with exit code 69

What should I do?

6

I do not believe the error will be exactly the same in this case, and the difference is likely important.

Either access your cluster at one of the addresses in its TLS certificate, or give it a new certificate.

1 Like
7

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.