ConfigSyncService failed to start

Hello dear developers,

i have troubleshooting bringing up the elasticsearch cluster in combination with the codelibs/elasticsearch-configsync.

I am using elasticsearch Version 6.1.1 and elasticsearch-configsync version 6.1.1.
I get the following error message:

[2018-02-08T18:04:46,909][ERROR][o.c.e.c.s.ConfigSyncService] [******] Failed to start ConfigFileUpdater.
org.elasticsearch.ElasticsearchSecurityException: action [indices:admin/exists] is unauthorized for user [_system]
        at ~[?:?]
        at ~[?:?]
        at ~[?:?]
        at ~[?:?]
        at$authorizeRequest$4( ~[?:?]
        at$AsyncAuthorizer.maybeRun( ~[?:?]
        at$AsyncAuthorizer.setRunAsRoles( ~[?:?]
        at$AsyncAuthorizer.authorize( ~[?:?]
        at ~[?:?]
        at$applyInternal$3( ~[?:?]
        at org.elasticsearch.action.ActionListener$1.onResponse( ~[elasticsearch-6.1.1.jar:6.1.1]
        at$Authenticator.lambda$writeAuthToContext$23( ~[?:?]
at$Authenticator.writeAuthToContext( ~[?:?]
at$Authenticator.lambda$handleNullToken$16( ~[?:?]
at$Authenticator.handleNullToken( ~[?:?]

I am using xpack for the elasticsearch installation and the mentioned user _system is a internal xpack user.

Is this a known issue? Do you maybe had such behaviour in the past. Meanwhile i would dig into it and search for the solution.

Best regards.

DId you ask xpack developers?

Unfortunately not yet. I would try it installing without xpack. Then i would give feedback in this issue and ask the devs from xpack.
Btw. thx for formatting the stacktrace. :slight_smile:

@marevol It is working without x-pack, but we need to connect to a production cluster with x-pack. (to answer @Artjom-Grigorjew).

@marevol here the response from Elasticsearch team.

It doesn’t look like the config sync plugin is compatible with X-Pack security.
I would suggest that you raise the issue with the config sync authors.

Thank you for checking it, but we have no plan to support x-pack security at the moment.
If you need more supports, please contact Commercial Support.

I did send my inquiries to your commercial support. Hope that we can resolve this issue soon.
Thanks for the follow-up.