Opensearch install

Opensearch via Helm Version 2.0.1

Copy defaults to be used with helm if you want

kubectl -n opensearch cp  opensearch-cluster-master-2:/usr/share/opensearch/config config-files

Update admin and other passwords via yaml on host

• home dir is /usr/share/opensearch

kubectl -n opensearch exec -it opensearch-cluster-master-2 -- bash
~/plugins/opensearch-security/tools/hash.sh -p mypassincleartext
vi ~/config/opensearch-security/internal_users.yml


~/plugins/opensearch-security/tools/securityadmin.sh -cd ~//config/opensearch-security -icl -nhnv -cacert ~//config/root-ca.pem -cert ~//config/kirk.pem -key ~//config/kirk-key.pem

https://opensearch.org/docs/latest/opensearch/install/docker/

https://opensearch.org/docs/latest/security-plugin/configuration/security-admin/

Change password on init

• https://github.com/opensearch-project/helm-charts/issues/161
• /usr/share/opensearch/plugins/opensearch-security/securityconfig/whitelist.yml
• https://github.com/opendistro/for-elasticsearch-docs/issues/5

https://opensearch.org/docs/latest/security-plugin/access-control/api/#get-account-details

curl -XPUT https:/opensearch.dev.example.com/_plugins/_security/api/account -u 'admin:admin'  -d '{ "current_password" : "admin", "password" : "foothis" }'  -H 'Content-Type: application/json'

Trash

cd plugins/opensearch-security/tools
sh securityadmin.sh -cd ../securityconfig/ -icl -nhnv -cacert /usr/share/opensearch/config/root-ca.pem -cert /usr/share/opensearch/config/kirk.pem -key /usr/share/opensearch/config/kirk-key.pem