Skip to content

[BUG] There is no way to configure some security plugin settings #736

@vchirikov

Description

@vchirikov

Hi, looks like there is no way to configure some of plugins.security config:

Example:

r.reconcilerContext.AddConfig("plugins.security.restapi.roles_enabled", `["all_access", "security_rest_api_access"]`)
r.reconcilerContext.AddConfig("plugins.security.system_indices.enabled", "true")

I have:

#...
  general:
    additionalConfig:
      # doesn't work here (?)
      plugins.security.restapi.roles_enabled: '["all_access", "security_rest_api_access", "full_access"]'
      plugins.security.system_indices.enabled: "false"
#...

I see the default settings in opensearch-config ConfigMap.

plugins.security.restapi.roles_enabled: ["all_access", "security_rest_api_access"]
plugins.security.system_indices.enabled: true

Also see my overrides provided via environment variables in pod, but looks like they doesn't work.
There is a way to disable system indices protection?

Metadata

Metadata

Assignees

No one assigned

    Labels

    bugSomething isn't working

    Type

    No type

    Projects

    Status

    📦 Backlog

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions