使用Golang与elasticsearch-v8连接Elasticsearch认证失败求助

使用的代码 #

func getESClient() (*elasticsearch.Client, error) {

    cfg := config.LoadEnv()
    cloudId := cfg.ElasticCloudId
    apiKey := cfg.ElasticSearchApiKey

    log.Println("Using CloudID:", cloudId)

    client, err := elasticsearch.NewClient(elasticsearch.Config{
        CloudID: string(cloudId),
        APIKey:  apiKey,
    })

    if err != nil {
        log.Fatal("Failed to connect to the Elasticsearch client:", err)
        return nil, err
    }
    log.Println(client.Info())
    log.Println("Client info")
    return client, nil
}

遇到的错误 #

2024/06/14 20:04:16 [401 Unauthorized] {"error":{"root_cause":[{"type":"security_exception","reason":"unable to authenticate with provided credentials and anonymous access is not allowed for this request","additional_unsuccessful_credentials":"API key: Illegal base64 character 3a","header":{"WWW-Authenticate":["Basic realm=\"security\" charset=\"UTF-8\"","Bearer realm=\"security\"","ApiKey"]}}],"type":"security_exception","reason":"unable to authenticate with provided credentials and anonymous access is not allowed for this request","additional_unsuccessful_credentials":"API key: Illegal base64 character 3a","header":{"WWW-Authenticate":["Basic realm=\"security\" charset=\"UTF-8\"","Bearer realm=\"security\"","ApiKey"]}}

环境变量配置 #

ELASTICSEARCH_API_KEY=https://id.westus2.azure.elastic-cloud.com:443
ELASTICSEARCH_CLOUD_ID=elasticsearch:id==

使用的依赖包 #

"github.com/elastic/go-elasticsearch/v8"

解决提示 #

• 环境变量配置完全混淆：
  • ELASTICSEARCH_API_KEY 需填写Elasticsearch的API密钥（合法Base64字符串，无:这类特殊字符），而非集群URL
  • ELASTICSEARCH_CLOUD_ID 需填写Elastic Cloud控制台获取的完整Cloud ID（格式为集群名称:Base64编码的集群元数据），当前配置的elasticsearch:id==无效
• 错误中Illegal base64 character 3a的原因是将带:的URL作为API Key传入，API Key要求为纯Base64字符，:不属于该字符集导致解析失败
• 修正步骤：
  1. 登录Elastic Cloud控制台，进入目标集群详情页获取正确的Cloud ID
  2. 在控制台"Security" > "API keys"页面生成或复制有效的API密钥
  3. 更新环境变量为正确值后重启应用测试

内容的提问来源于stack exchange，提问作者Rodrigo Burgos