adding admin access via the REST API (#18798)

This commit is contained in:
Jan Heise
2024-03-27 11:11:52 +01:00
committed by GitHub
parent 295bb65e10
commit 0f0fb1fdaa

View File

@@ -124,7 +124,7 @@ public class OpensearchConfigurationProvider implements Provider<OpensearchConfi
localConfiguration.getOpensearchTransportPort(),
localConfiguration.getClustername(),
localConfiguration.getDatanodeNodeName(),
localConfiguration.getNodeRoles() ,
localConfiguration.getNodeRoles(),
localConfiguration.getOpensearchDiscoverySeedHosts(),
securityConfiguration,
s3RepositoryConfiguration,
@@ -146,23 +146,26 @@ public class OpensearchConfigurationProvider implements Provider<OpensearchConfi
config.put("network.bind_host", localConfiguration.getBindAddress());
// https://opensearch.org/docs/latest/tuning-your-cluster/availability-and-recovery/snapshots/snapshot-restore/#shared-file-system
if(localConfiguration.getPathRepo() != null && !localConfiguration.getPathRepo().isEmpty()) {
if (localConfiguration.getPathRepo() != null && !localConfiguration.getPathRepo().isEmpty()) {
config.put("path.repo", String.join(",", localConfiguration.getPathRepo()));
}
//config.put("network.publish_host", Tools.getLocalCanonicalHostname());
if(localConfiguration.getOpensearchDebug() != null && !localConfiguration.getOpensearchDebug().isBlank()) {
if (localConfiguration.getOpensearchDebug() != null && !localConfiguration.getOpensearchDebug().isBlank()) {
config.put("logger.org.opensearch", localConfiguration.getOpensearchDebug());
}
if(localConfiguration.getOpensearchAuditLog() != null && !localConfiguration.getOpensearchAuditLog().isBlank()) {
if (localConfiguration.getOpensearchAuditLog() != null && !localConfiguration.getOpensearchAuditLog().isBlank()) {
config.put("plugins.security.audit.type", localConfiguration.getOpensearchAuditLog());
}
// common OpenSearch config parameters from our docs
config.put("indices.query.bool.max_clause_count", localConfiguration.getIndicesQueryBoolMaxClauseCount().toString());
// enable admin access via the REST API
config.put("plugins.security.restapi.admin.enabled", "true");
return config.build();
}