Remove the demo configuration of the OpenSearch Security plugin #1228
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Description
Remove the demo configuration of the OpenSearch Security plugin and replace it with a minimal configuration
The demo configuration contains – among other things – pre-defined users with well-known credentials. If the security index is initialized with
plugins.security.allow_default_init_securityindex: "true"and not all files of the configuration are correctly overriden bypodOverrides, then the cluster is vulnerable. Therefore, this configuration is replaced with a minimal one. OpenSearch starts successfully with this minimal configuration but users and authentication have to be defined explicitly to use the cluster.Part of stackabletech/opensearch-operator#2
Definition of Done Checklist
Note
Not all of these items are applicable to all PRs, the author should update this template to only leave the boxes in that are relevant.
Please make sure all these things are done and tick the boxes
TIP: Running integration tests with a new product image
The image can be built and uploaded to the kind cluster with the following commands:
See the output of
baketo retrieve the image tag for<image-tagged-with-the-major-version>.