Skip to content

Security plugin configuration #43

@siegfriedweber

Description

@siegfriedweber

Part of #1

Tasks

  • Allow config overrides also for the plugin configuration files
  • Update changed security config via tools/securityadmin.sh
  • Create a basic configuration for the security plugin
  • Fix admin authentication
    It's currently done via Client TLS Authentication by comparing the CN in the certificate. But the secret-operator hard-codes it to CN=generated certificate for pod. OpenSearch complains that admin and node certificates must not have the same CN. see Use more clever certificate subject secret-operator#617
  • Add authentication support
    • HTTP Basic authentication
    • LDAP
    • JSON Web Token (not sure if required)
    • OpenID Connect (not sure if required)

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions