iSharkFly-Docs
/
opensearch-docs-cn
mirror of https://github.com/iSharkFly-Docs/opensearch-docs-cn
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Update multi-tenancy.md (#1367) 

Signed-off-by: pawelw1 <pawel.wlodarczyk@eliatra.com>

Signed-off-by: pawelw1 <pawel.wlodarczyk@eliatra.com>
Co-authored-by: Naarcha-AWS <97990722+Naarcha-AWS@users.noreply.github.com>
This commit is contained in:
pawelw1 2022-10-06 23:42:24 +01:00 committed by GitHub
parent 4eaf4e0944
commit 8ad9ec9bb9
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 5 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
_security-plugin/access-control/multi-tenancy.md
View File

@ -34,9 +34,9 @@ Multi-tenancy is enabled by default, but you can disable it or change its settin
```yml
config:
dynamic:
opensearch-dashboards:
kibana:
multitenancy_enabled: true
server_username: opensearch
server_username: kibanaserver
index: '.kibana'
do_not_fail_on_forbidden: false
```
@ -44,15 +44,15 @@ config:
Setting | Description
:--- | :---
`multitenancy_enabled` | Enable or disable multi-tenancy. Default is true.
`server_username` | Must match the name of the OpenSearch Dashboards server user from `opensearch_dashboards.yml`. Default is `dashboardserver`.
`server_username` | Must match the name of the OpenSearch Dashboards server user from `opensearch_dashboards.yml`. Default is `kibanaserver`.
`index` | Must match the name of the OpenSearch Dashboards index from `opensearch_dashboards.yml`. Default is `.kibana`.
`do_not_fail_on_forbidden` | If true, the security plugin removes any content that a user is not allowed to see from search results. If false, the plugin returns a security exception. Default is false.
`opensearch_dashboards.yml` has some additional settings:
```yml
opensearch.username: dashboardserver
opensearch.password: dashboardserver
opensearch.username: kibanaserver
opensearch.password: kibanaserver
opensearch.requestHeadersAllowlist: ["securitytenant","Authorization"]
opensearch_security.multitenancy.enabled: true
opensearch_security.multitenancy.tenants.enable_global: true