iSharkFly-Docs/opensearch-docs-cn
1
0
Fork 0
mirror of https://github.com/iSharkFly-Docs/opensearch-docs-cn synced 2025-03-08 10:12:26 +00:00
Code Issues Packages Projects Releases Wiki Activity
opensearch-docs-cn/_security-plugin/configuration/disable.md
Horvv 9ae5a6bfc8
Update disable.md 
The line to create the new image by deactivating the security plugin uses "security-dashboards" and this returns the following error:

docker build --tag=opensearch-dashboards-no-security .                                                                                                      
Sending build context to Docker daemon   5.12kB
Step 1/3 : FROM opensearchproject/opensearch-dashboards:1.0.0
 ---> 6a109c3fbebf
Step 2/3 : RUN /usr/share/opensearch-dashboards/bin/opensearch-dashboards-plugin remove security-dashboard
 ---> Running in 965b66ef7abd
Unable to remove plugin because of error: "Plugin [security-dashboard] is not installed"
The command '/bin/sh -c /usr/share/opensearch-dashboards/bin/opensearch-dashboards-plugin remove security-dashboard' returned a non-zero code: 74



Instead using the correct plugin name "securityDashboards" the image compiles correctly:

docker build --tag=opensearch-dashboards-no-security .                                                                                                       
Sending build context to Docker daemon  6.144kB
Step 1/3 : FROM opensearchproject/opensearch-dashboards:1.0.0
 ---> 6a109c3fbebf
Step 2/3 : RUN /usr/share/opensearch-dashboards/bin/opensearch-dashboards-plugin remove securityDashboards
 ---> Using cache
 ---> bb9a535b8e42
Step 3/3 : COPY --chown=opensearch-dashboards:opensearch-dashboards opensearch_dashboards.yml /usr/share/opensearch-dashboards/config/
 ---> e6e76bba8a4f
Successfully built e6e76bba8a4f
Successfully tagged opensearch-dashboards-no-security:latest


Ref:
-  https://opensearch.org/docs/dashboards/install/plugins/#list-installed-plugins
-  https://github.com/opensearch-project/documentation-website/blob/main/_dashboards/install/plugins.md
2021-07-13 19:06:13 +02:00

2.6 KiB
Executable File
Raw Blame History

layout title parent nav_order redirect_from
default Disable Security Configuration 99 /docs/security/configuration/disable/

Disable security

You might want to temporarily disable the security plugin to make testing or internal usage more straightforward. To disable the plugin, add the following line in opensearch.yml:

plugins.security.disabled: true

A more permanent option is to remove the security plugin entirely:

  1. Delete the plugins/opensearch-security folder on all nodes.
  2. Delete all plugins.security.* configuration entries from opensearch.yml.

To perform these steps on the Docker image, see Customize the Docker image.

Disabling or removing the plugin exposes the configuration index for the security plugin. If the index contains sensitive information, be sure to protect it through some other means. If you no longer need the index, delete it. {: .warning }

Remove OpenSearch Dashboards plugin

The security plugin is actually two plugins: one for OpenSearch and one for OpenSearch Dashboards. You can use the OpenSearch plugin independently, but the OpenSearch Dashboards plugin depends on a secured OpenSearch cluster.

If you disable the security plugin in opensearch.yml (or delete the plugin entirely) and still want to use OpenSearch Dashboards, you must remove the corresponding OpenSearch Dashboards plugin. For more information, see OpenSearch Dashboards remove plugins.

Docker

  1. Create a new Dockerfile:

    FROM opensearchproject/opensearch-dashboards:{{site.opensearch_version}}
RUN /usr/share/opensearch-dashboards/bin/opensearch-dashboards-plugin remove securityDashboards
COPY --chown=opensearch-dashboards:opensearch-dashboards opensearch_dashboards.yml /usr/share/opensearch-dashboards/config/

    In this case, opensearch_dashboards.yml is a "vanilla" version of the file with no entries for the security plugin. It might look like this:

    ---
server.name: opensearch-dashboards
server.host: "0"
opensearch.hosts: http://localhost:9200

  2. To build the new Docker image, run the following command:

    docker build --tag=opensearch-dashboards-no-security .

  3. In docker-compose.yml, change opensearchproject/opensearch-dashboards:{{site.opensearch_version}} to opensearch-dashboards-no-security.

  4. Change OPENSEARCH_HOSTS or opensearch.hosts to http:// rather than https://.

  5. Enter docker-compose up.