From 0f0fb1fdaad99ff1785df42e72a5d19c03fafbbe Mon Sep 17 00:00:00 2001
From: Jan Heise <jan.heise@graylog.com>
Date: Wed, 27 Mar 2024 11:11:52 +0100
Subject: [PATCH] adding admin access via the REST API (#18798)

---
 .../OpensearchConfigurationProvider.java              | 11 +++++++----
 1 file changed, 7 insertions(+), 4 deletions(-)

diff --git a/data-node/src/main/java/org/graylog/datanode/configuration/OpensearchConfigurationProvider.java b/data-node/src/main/java/org/graylog/datanode/configuration/OpensearchConfigurationProvider.java
index 6fa9d400ae..d4e6fe4e9e 100644
--- a/data-node/src/main/java/org/graylog/datanode/configuration/OpensearchConfigurationProvider.java
+++ b/data-node/src/main/java/org/graylog/datanode/configuration/OpensearchConfigurationProvider.java
@@ -124,7 +124,7 @@ public class OpensearchConfigurationProvider implements Provider<OpensearchConfi
                     localConfiguration.getOpensearchTransportPort(),
                     localConfiguration.getClustername(),
                     localConfiguration.getDatanodeNodeName(),
-                    localConfiguration.getNodeRoles() ,
+                    localConfiguration.getNodeRoles(),
                     localConfiguration.getOpensearchDiscoverySeedHosts(),
                     securityConfiguration,
                     s3RepositoryConfiguration,
@@ -146,23 +146,26 @@ public class OpensearchConfigurationProvider implements Provider<OpensearchConfi
         config.put("network.bind_host", localConfiguration.getBindAddress());
 
         // https://opensearch.org/docs/latest/tuning-your-cluster/availability-and-recovery/snapshots/snapshot-restore/#shared-file-system
-        if(localConfiguration.getPathRepo() != null && !localConfiguration.getPathRepo().isEmpty()) {
+        if (localConfiguration.getPathRepo() != null && !localConfiguration.getPathRepo().isEmpty()) {
             config.put("path.repo", String.join(",", localConfiguration.getPathRepo()));
         }
 
         //config.put("network.publish_host", Tools.getLocalCanonicalHostname());
 
-        if(localConfiguration.getOpensearchDebug() != null && !localConfiguration.getOpensearchDebug().isBlank()) {
+        if (localConfiguration.getOpensearchDebug() != null && !localConfiguration.getOpensearchDebug().isBlank()) {
             config.put("logger.org.opensearch", localConfiguration.getOpensearchDebug());
         }
 
-        if(localConfiguration.getOpensearchAuditLog() != null && !localConfiguration.getOpensearchAuditLog().isBlank()) {
+        if (localConfiguration.getOpensearchAuditLog() != null && !localConfiguration.getOpensearchAuditLog().isBlank()) {
             config.put("plugins.security.audit.type", localConfiguration.getOpensearchAuditLog());
         }
 
         // common OpenSearch config parameters from our docs
         config.put("indices.query.bool.max_clause_count", localConfiguration.getIndicesQueryBoolMaxClauseCount().toString());
 
+        // enable admin access via the REST API
+        config.put("plugins.security.restapi.admin.enabled", "true");
+
         return config.build();
     }