opensource/graylog2-server
1
0
Fork 0
mirror of https://github.com/Graylog2/graylog2-server.git synced 2026-03-13 09:32:21 +08:00
Code Issues Packages Projects Releases Wiki Activity

Insecure startup of OS in datanode only if explicitly configured (#16108)

Browse Source 
* Insecure startup of OS in datanode only if explicitly configured

* Data node can be started without starting OS, just to be discovered by pre-flight mode
This commit is contained in:
luk-kaminski
2023-08-07 17:21:08 +02:00
committed by GitHub
parent b0882211c0
commit e7025a9da8
8 changed files with 39 additions and 28 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
data-node/src/main/java/org/graylog/datanode/process/OpensearchConfiguration.java
View File

@@ -36,7 +36,9 @@ public record OpensearchConfiguration(
String authUsername,
String authPassword,
String clusterName, String nodeName, List<String> nodeRoles,
List<String> discoverySeedHosts, OpensearchSecurityConfiguration opensearchSecurityConfiguration, Map<String, String> additionalConfiguration
List<String> discoverySeedHosts,
OpensearchSecurityConfiguration opensearchSecurityConfiguration,
Map<String, String> additionalConfiguration
) {
public Map<String, String> asMap() {
@@ -83,4 +85,8 @@ public record OpensearchConfiguration(
final boolean sslEnabled = Boolean.parseBoolean(asMap().getOrDefault("plugins.security.ssl.http.enabled", "false"));
return new HttpHost(hostname(), httpPort(), sslEnabled ? "https" : "http");
}
public boolean securityConfigured() {
return opensearchSecurityConfiguration() != null;
}
}