Difference between revisions of "Opensearch install"
Jump to navigation
Jump to search
(Created page with "https://opensearch.org/docs/latest/opensearch/install/docker/") |
|||
| (10 intermediate revisions by the same user not shown) | |||
| Line 1: | Line 1: | ||
| + | # Opensearch via Helm Version 2.0.1 | ||
| + | |||
| + | ## Copy defaults to be used with helm if you want | ||
| + | ``` | ||
| + | kubectl -n opensearch cp opensearch-cluster-master-2:/usr/share/opensearch/config config-files | ||
| + | ``` | ||
| + | |||
| + | ## Update admin and other passwords via yaml on host | ||
| + | - home dir is /usr/share/opensearch | ||
| + | ``` | ||
| + | kubectl -n opensearch exec -it opensearch-cluster-master-2 -- bash | ||
| + | ~/plugins/opensearch-security/tools/hash.sh -p mypassincleartext | ||
| + | vi ~/config/opensearch-security/internal_users.yml | ||
| + | |||
| + | |||
| + | ~/plugins/opensearch-security/tools/securityadmin.sh -cd ~//config/opensearch-security -icl -nhnv -cacert ~//config/root-ca.pem -cert ~//config/kirk.pem -key ~//config/kirk-key.pem | ||
| + | |||
| + | ``` | ||
| + | |||
| + | |||
https://opensearch.org/docs/latest/opensearch/install/docker/ | https://opensearch.org/docs/latest/opensearch/install/docker/ | ||
| + | |||
| + | |||
| + | https://opensearch.org/docs/latest/security-plugin/configuration/security-admin/ | ||
| + | |||
| + | |||
| + | # Change password on init | ||
| + | - https://github.com/opensearch-project/helm-charts/issues/161 | ||
| + | - /usr/share/opensearch/plugins/opensearch-security/securityconfig/whitelist.yml | ||
| + | - https://github.com/opendistro/for-elasticsearch-docs/issues/5 | ||
| + | |||
| + | |||
| + | https://opensearch.org/docs/latest/security-plugin/access-control/api/#get-account-details | ||
| + | ``` | ||
| + | curl -XPUT https:/opensearch.dev.example.com/_plugins/_security/api/account -u 'admin:admin' -d '{ "current_password" : "admin", "password" : "foothis" }' -H 'Content-Type: application/json' | ||
| + | ``` | ||
| + | |||
| + | |||
| + | |||
| + | |||
| + | # Trash | ||
| + | ``` | ||
| + | cd plugins/opensearch-security/tools | ||
| + | sh securityadmin.sh -cd ../securityconfig/ -icl -nhnv -cacert /usr/share/opensearch/config/root-ca.pem -cert /usr/share/opensearch/config/kirk.pem -key /usr/share/opensearch/config/kirk-key.pem | ||
| + | ``` | ||
Latest revision as of 23:48, 5 June 2022
Opensearch via Helm Version 2.0.1
Copy defaults to be used with helm if you want
kubectl -n opensearch cp opensearch-cluster-master-2:/usr/share/opensearch/config config-files
Update admin and other passwords via yaml on host
- home dir is /usr/share/opensearch
kubectl -n opensearch exec -it opensearch-cluster-master-2 -- bash ~/plugins/opensearch-security/tools/hash.sh -p mypassincleartext vi ~/config/opensearch-security/internal_users.yml ~/plugins/opensearch-security/tools/securityadmin.sh -cd ~//config/opensearch-security -icl -nhnv -cacert ~//config/root-ca.pem -cert ~//config/kirk.pem -key ~//config/kirk-key.pem
https://opensearch.org/docs/latest/opensearch/install/docker/
https://opensearch.org/docs/latest/security-plugin/configuration/security-admin/
Change password on init
- https://github.com/opensearch-project/helm-charts/issues/161
- /usr/share/opensearch/plugins/opensearch-security/securityconfig/whitelist.yml
- https://github.com/opendistro/for-elasticsearch-docs/issues/5
https://opensearch.org/docs/latest/security-plugin/access-control/api/#get-account-details
curl -XPUT https:/opensearch.dev.example.com/_plugins/_security/api/account -u 'admin:admin' -d '{ "current_password" : "admin", "password" : "foothis" }' -H 'Content-Type: application/json'
Trash
cd plugins/opensearch-security/tools sh securityadmin.sh -cd ../securityconfig/ -icl -nhnv -cacert /usr/share/opensearch/config/root-ca.pem -cert /usr/share/opensearch/config/kirk.pem -key /usr/share/opensearch/config/kirk-key.pem