EFK Authentication of [kibana_system] was terminated by realm [reserved]

elsticsearch 로그 확인

kubectl logs -f pod/{elasticsearch pod명} -n {namespace}

오류

{"@timestamp":"2025-01-30T02:54:35.707Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] - failed to authenticate user [kibana_system]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[elastic-0][transport_worker][T#3]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","trace.id":"64d25f3a9512a3acdb8844775f65fac4","elasticsearch.cluster.uuid":"W4p_8JG_RSu3SpRe5A3bcg","elasticsearch.node.id":"oH2jczs5QjOiXQ9vE_UOsQ","elasticsearch.node.name":"elastic-0","elasticsearch.cluster.name":"elastic"}

원인: kibana_system 계정의 비밀번호가 일치하지 않음

비밀번호 초기화

kubectl exec -it pod/{elasticsearch pod명} -n {namespace} -- sh

elasticsearch-setup-passwords -u kibana_system

Y

신규로 생성된 비밀번호 복사

kibana.yml 수정

elasticsearch.username: "kibana_system"
elasticsearch.password: "{신규로 생성된 비밀번호}"

수정한 내용 반영

kubectl apply -f {kibana yml 파일}

kubectl delete pod/{kibana pod명} -n {namespace}