elasticsearch - 无法使用 OCI Amazon S3 兼容性 API 配置 Elasticsearch 快照存储库

Question

我的 Elasticsearch7.8.0 在 OCI OKE 中运行(在 Oracle Cloud 中运行的 Kubernetes)。我想使用 OCI Amazon S3 兼容性 API 通过 OCI 对象存储设置 Elasticsearch 备份快照。添加了 repository-s3 插件并在 POD 中配置了 ACCESS_KEY 和 SECRET_KEY。在存储库中，我收到“s_s_l_peer_unverified_exception”

PUT /_snapshot/s3-repository

{
  "type": "s3",
  "settings": {
    "client": "default",
    "region": "OCI_REGION",
    "endpoint": "OCI_TENANCY.compat.objectstorage.OCI_REGION.oraclecloud.com",
     "bucket": "es-backup"    
  }
}

响应:

{
  "error" : {
    "root_cause" : [
      {
        "type" : "repository_verification_exception",
        "reason" : "[s3-repository] path  is not accessible on master node"
      }
    ],
    "type" : "repository_verification_exception",
    "reason" : "[s3-repository] path  is not accessible on master node",
    "caused_by" : {
      "type" : "i_o_exception",
      "reason" : "Unable to upload object [tests-0J3NChNRT9WIQJknHAssKg/master.dat] using a single upload",
      "caused_by" : {
        "type" : "sdk_client_exception",
        "reason" : "Unable to execute HTTP request: Certificate for <es-backup.OCI_TENANCY.compat.objectstorage.OCI_REGION.oraclecloud.com> doesn't match any of the subject alternative names: [swiftobjectstorage.us-ashburn-1.oraclecloud.com]",
        "caused_by" : {
          "type" : "s_s_l_peer_unverified_exception",
          "reason" : "Certificate for <es-backup.OCI_TENANCY.compat.objectstorage.OCI_REGION.oraclecloud.com> doesn't match any of the subject alternative names: [swiftobjectstorage.us-ashburn-1.oraclecloud.com]"
        }
      }
    }
  },
  "status" : 500
}

Answer 1

我希望您了解何时使用 S3 兼容 API。

"endpoint":"OCI_TENANCY.compat.objectstorage.OCI_REGION.oraclecloud.com"

请将 OCI_TENANCY 修改为 TENANCY_NAMESPACE。请引用this link获取更多信息。

您可以在“管理”->“租户详细信息”页面中找到您的租户命名空间信息。