Skip to content

[ISSUE] 8.8 Importer deployment external database no secret #4601

@panagiotisgts

Description

@panagiotisgts

Describe the issue:

When using an external Elasticsearc/Opensearch database installation the 8.8 Importer deployment does not correctly inherit the Elasticsearch/Opensearch password from the ZEEBELEASTICSEARCH configuration.

Actual behavior:

Failed to authenticate with elasticsearch missing password

[2025-10-29 18:19:43.189] [main] WARN 
	io.camunda.operate.util.RetryOperation - Retry Operation Connect to Elasticsearch cluster [camunda8-elasticsearch] at http://camunda8-elasticsearch-es-internal-http:9200 failed: Elasticsearch exception [type=security_exception, reason=missing authentication credentials for REST request [/_cluster/health?master_timeout=30s&level=cluster&timeout=30s]]
org.elasticsearch.ElasticsearchStatusException: Elasticsearch exception [type=security_exception, reason=missing authentication credentials for REST request [/_cluster/health?master_timeout=30s&level=cluster&timeout=30s]]

Expected behavior:

ES/OS client correctly authenticate with external database using the provided secret.

How to reproduce:

values.yaml

global:
  elasticsearch:
      enabled: true
      external: true
      tls:
        enabled: false
        existingSecret: ""
      auth:
        username: elastic
        secret:
          existingSecret: camunda8-elasticsearch-es-elastic-user
          existingSecretKey: elastic
orchestration:
  migration:
      data:
        enabled: true

Logs:

Environment:

Please note: Without the following info, it's hard to resolve the issue and probably it will be closed.

  • Platform: SM
  • Helm CLI version:
  • Chart version: 13.1.1
  • Values file:

Related incident: #inc-support-29885-orchestration-container-not-inheriting-es-basic-auth-cred

Related JIRA ticket https://jira.camunda.com/browse/SUPPORT-29885

Metadata

Metadata

Labels

kind/issueUnidentified issue, it could be a bug, misconfig, or anything in betweensupportMarks an issue as related to a customer support request (don't edit the lable)

Type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions