Remove admin:admin default and update instructions for demo setup

_api-reference/tasks.md

@@ -267,7 +267,7 @@ To associate requests with tasks for better tracking, you can provide a `X-Opaqu
 Usage:
 
 ```bash
-curl -i -H "X-Opaque-Id: 111111" "https://localhost:9200/_tasks" -u 'admin:admin' --insecure
+curl -i -H "X-Opaque-Id: 111111" "https://localhost:9200/_tasks" -u 'admin:< Admin password >' --insecure
 ```
 {% include copy.html %}
 
@@ -326,6 +326,6 @@ content-length: 768
 This operation supports the same parameters as the `tasks` operation. The following example shows how you can associate `X-Opaque-Id` with specific tasks:
 
 ```bash
-curl -i -H "X-Opaque-Id: 123456" "https://localhost:9200/_tasks?nodes=opensearch-node1" -u 'admin:admin' --insecure
+curl -i -H "X-Opaque-Id: 123456" "https://localhost:9200/_tasks?nodes=opensearch-node1" -u 'admin:< Admin password >' --insecure
 ```
 {% include copy.html %}

_benchmark/quickstart.md

@@ -31,7 +31,7 @@ After installation, you can verify OpenSearch is running by going to `localhost:
 Use the following command to verify OpenSearch is running with SSL certificate checks disabled:
 
 ```bash
-curl -k -u admin:admin https://localhost:9200			# the "-k" option skips SSL certificate checks
+curl -k -u admin:< Admin password > https://localhost:9200			# the "-k" option skips SSL certificate checks
 
 {
   "name" : "147ddae31bf8.opensearch.org",

_clients/javascript/index.md

@@ -48,7 +48,7 @@ To connect to the default OpenSearch host, create a client object with the addre
 var host = "localhost";
 var protocol = "https";
 var port = 9200;
-var auth = "admin:admin"; // For testing only. Don't store credentials in code.
+var auth = "admin:< Admin password >"; // For testing only. Don't store credentials in code.
 var ca_certs_path = "/full/path/to/root-ca.pem";
 
 // Optional client certificates if you don't want to use HTTP basic authentication.
@@ -303,7 +303,7 @@ The following sample program creates a client, adds an index with non-default se
 var host = "localhost";
 var protocol = "https";
 var port = 9200;
-var auth = "admin:admin"; // For testing only. Don't store credentials in code.
+var auth = "admin:< Admin password >"; // For testing only. Don't store credentials in code.
 var ca_certs_path = "/full/path/to/root-ca.pem";
 
 // Optional client certificates if you don't want to use HTTP basic authentication.

_install-and-configure/install-dashboards/helm.md

@@ -34,7 +34,7 @@ Before you get started, you must first use [Helm to install OpenSearch]({{site.u
 Make sure that you can send requests to your OpenSearch pod:
 
 ```json
-$ curl -XGET https://localhost:9200 -u 'admin:admin' --insecure
+$ curl -XGET https://localhost:9200 -u 'admin:< Admin password >' --insecure
 {
   "name" : "opensearch-cluster-master-1",
   "cluster_name" : "opensearch-cluster",

_install-and-configure/install-opensearch/debian.md

@@ -40,10 +40,10 @@ This guide assumes that you are comfortable working from the Linux command line
 1. From the CLI, install using `dpkg`.
    ```bash
    # x64
-   sudo dpkg -i opensearch-{{site.opensearch_version}}-linux-x64.deb
+   sudo env OPENSEARCH_INITIAL_ADMIN_PASSWORD=< Admin password > dpkg -i opensearch-{{site.opensearch_version}}-linux-x64.deb
 
    # arm64
-   sudo dpkg -i opensearch-{{site.opensearch_version}}-linux-arm64.deb
+   sudo env OPENSEARCH_INITIAL_ADMIN_PASSWORD=< Admin password> dpkg -i opensearch-{{site.opensearch_version}}-linux-arm64.deb
    ```
 
 1. After the installation succeeds, enable OpenSearch as a service.
@@ -175,7 +175,7 @@ An OpenSearch node in its default configuration (with demo certificates and user
 1. Send requests to the server to verify that OpenSearch is running. Note the use of the `--insecure` flag, which is required because the TLS certificates are self-signed.
    - Send a request to port 9200:
       ```bash
-      curl -X GET https://localhost:9200 -u 'admin:admin' --insecure
+      curl -X GET https://localhost:9200 -u 'admin:< Admin password >' --insecure
       ```
       {% include copy.html %}
 
@@ -201,7 +201,7 @@ An OpenSearch node in its default configuration (with demo certificates and user
       ```
    - Query the plugins endpoint:
     ```bash
-    curl -X GET https://localhost:9200/_cat/plugins?v -u 'admin:admin' --insecure
+    curl -X GET https://localhost:9200/_cat/plugins?v -u 'admin:< Admin password >' --insecure
     ```
     {% include copy.html %}
 

_install-and-configure/install-opensearch/docker.md

@@ -85,14 +85,14 @@ To download a specific version of OpenSearch or OpenSearch Dashboards other than
 
 Before continuing, you should verify that Docker is working correctly by deploying OpenSearch in a single container.
 
-1. Run the following command:
+1. Run the following command and pass in your own custom admin password:
     ```bash
-    # This command maps ports 9200 and 9600, sets the discovery type to "single-node" and requests the newest image of OpenSearch
-    docker run -d -p 9200:9200 -p 9600:9600 -e "discovery.type=single-node" opensearchproject/opensearch:latest
+    # This command maps ports 9200 and 9600, sets the discovery type to "single-node", sets the initial admin password according to user input and requests the newest image of OpenSearch
+    docker run -d -p 9200:9200 -p 9600:9600 -e "discovery.type=single-node" -e "OPENSEARCH_INITIAL_ADMIN_PASSWORD=< Admin password >" opensearchproject/opensearch:latest
     ```
-1. Send a request to port 9200. The default username and password are `admin`.
+1. Send a request to port 9200. The default username is `admin` and the password is what you set for `OPENSEARCH_INITIAL_ADMIN_PASSWORD`.
     ```bash
-    curl https://localhost:9200 -ku 'admin:admin'
+    curl https://localhost:9200 -ku 'admin:< Admin password >'
     ```
     {% include copy.html %}
 
@@ -166,6 +166,7 @@ services:
       - cluster.initial_cluster_manager_nodes=opensearch-node1,opensearch-node2 # Nodes eligible to serve as cluster manager
       - bootstrap.memory_lock=true # Disable JVM heap memory swapping
       - "OPENSEARCH_JAVA_OPTS=-Xms512m -Xmx512m" # Set min and max JVM heap sizes to at least 50% of system RAM
+      - "OPENSEARCH_INITIAL_ADMIN_PASSWORD=< Admin password >" # Set the password of the admin user for the demo configuration
     ulimits:
       memlock:
         soft: -1 # Set memlock to unlimited (no soft or hard limit)
@@ -190,6 +191,7 @@ services:
       - cluster.initial_cluster_manager_nodes=opensearch-node1,opensearch-node2
       - bootstrap.memory_lock=true
       - "OPENSEARCH_JAVA_OPTS=-Xms512m -Xmx512m"
+      - "OPENSEARCH_INITIAL_ADMIN_PASSWORD=< Admin password >"
     ulimits:
       memlock:
         soft: -1

_install-and-configure/install-opensearch/helm.md

@@ -91,7 +91,13 @@ You can also build the `opensearch-1.0.0.tgz` file manually:
    {% include copy.html %}
 
    The output shows you the specifications instantiated from the install.
-   To customize the deployment, pass in the values that you want to override with a custom YAML file:
+   To customize the deployment, pass in the values that you want to override with a custom YAML file. 
+   Specifically, for the demo configuration to work, you need to pass in an initial admin password:
+
+   ```yml
+   - name: OPENSEARCH_INITIAL_ADMIN_PASSWORD
+#    value: < Admin password >
+   ```
 
    ```bash
    helm install --values=customvalues.yaml opensearch-1.0.0.tgz

_install-and-configure/install-opensearch/rpm.md

@@ -46,16 +46,16 @@ This guide assumes that you are comfortable working from the Linux command line
 1. From the CLI, you can install the package with `rpm` or `yum`.
    ```bash
    # Install the x64 package using yum.
-   sudo yum install opensearch-{{site.opensearch_version}}-linux-x64.rpm
+   sudo env OPENSEARCH_INITIAL_ADMIN_PASSWORD=< Admin password > yum install opensearch-{{site.opensearch_version}}-linux-x64.rpm
 
    # Install the x64 package using rpm.
-   sudo rpm -ivh opensearch-{{site.opensearch_version}}-linux-x64.rpm
+   sudo env OPENSEARCH_INITIAL_ADMIN_PASSWORD=< Admin password > rpm -ivh opensearch-{{site.opensearch_version}}-linux-x64.rpm
 
    # Install the arm64 package using yum.
-   sudo yum install opensearch-{{site.opensearch_version}}-linux-x64.rpm
+   sudo env OPENSEARCH_INITIAL_ADMIN_PASSWORD=< Admin password > yum install opensearch-{{site.opensearch_version}}-linux-x64.rpm
 
    # Install the arm64 package using rpm.
-   sudo rpm -ivh opensearch-{{site.opensearch_version}}-linux-x64.rpm
+   sudo env OPENSEARCH_INITIAL_ADMIN_PASSWORD=< Admin password > rpm -ivh opensearch-{{site.opensearch_version}}-linux-x64.rpm
    ```
 1. After the installation succeeds, enable OpenSearch as a service.
     ```bash
@@ -147,7 +147,7 @@ An OpenSearch node in its default configuration (with demo certificates and user
 1. Send requests to the server to verify that OpenSearch is running. Note the use of the `--insecure` flag, which is required because the TLS certificates are self-signed.
    - Send a request to port 9200:
       ```bash
-      curl -X GET https://localhost:9200 -u 'admin:admin' --insecure
+      curl -X GET https://localhost:9200 -u 'admin:< Admin password >' --insecure
       ```
       {% include copy.html %}
 
@@ -173,7 +173,7 @@ An OpenSearch node in its default configuration (with demo certificates and user
       ```
    - Query the plugins endpoint:
       ```bash
-      curl -X GET https://localhost:9200/_cat/plugins?v -u 'admin:admin' --insecure
+      curl -X GET https://localhost:9200/_cat/plugins?v -u 'admin:< Admin password >' --insecure
       ```
       {% include copy.html %}
 

_install-and-configure/install-opensearch/tar.md

@@ -94,6 +94,12 @@ An OpenSearch node configured by the demo security script is not suitable for a
    ```
    {% include copy.html %}
 
+1. Set an initial admin password variable through the `OPENSEARCH_INITIAL_ADMIN_PASSWORD` environment variable.
+   ```bash
+   export OPENSEARCH_INITIAL_ADMIN_PASSWORD=< Admin password >
+   ```
+   {% include copy.html %}
+
 1. Run the OpenSearch startup script with the security demo configuration.
    ```bash
    ./opensearch-tar-install.sh
@@ -103,7 +109,7 @@ An OpenSearch node configured by the demo security script is not suitable for a
 1. Open another terminal session and send requests to the server to verify that OpenSearch is running. Note the use of the `--insecure` flag, which is required because the TLS certificates are self-signed.
    - Send a request to port 9200:
       ```bash
-      curl -X GET https://localhost:9200 -u 'admin:admin' --insecure
+      curl -X GET https://localhost:9200 -u 'admin:< Admin password >' --insecure
       ```
       {% include copy.html %}
 
@@ -129,7 +135,7 @@ An OpenSearch node configured by the demo security script is not suitable for a
       ```
    - Query the plugins endpoint:
       ```bash
-      curl -X GET https://localhost:9200/_cat/plugins?v -u 'admin:admin' --insecure
+      curl -X GET https://localhost:9200/_cat/plugins?v -u 'admin:< Admin password >' --insecure
       ```
       {% include copy.html %}
 

_install-and-configure/install-opensearch/windows.md

@@ -65,6 +65,12 @@ An OpenSearch node in its default configuration (with demo certificates and user
          ```
          {% include copy.html %}
 
+      1. Set the initial admin password via the `OPENSEARCH_INITIAL_ADMIN_PASSWORD` environment variable.
+         ```bat
+         set OPENSEARCH_INITIAL_ADMIN_PASSWORD=< Admin password >
+         ```
+         {% include copy.html %}
+
       1. Run the batch script.
          ```bat
          .\opensearch-windows-install.bat
@@ -74,7 +80,7 @@ An OpenSearch node in its default configuration (with demo certificates and user
 1. Open a new command prompt and send requests to the server to verify that OpenSearch is running. Note the use of the `--insecure` flag, which is required because the TLS certificates are self-signed.
    - Send a request to port 9200:
       ```bat
-      curl.exe -X GET https://localhost:9200 -u "admin:admin" --insecure
+      curl.exe -X GET https://localhost:9200 -u "admin:< Admin password >" --insecure
       ```
       {% include copy.html %}
 
@@ -100,7 +106,7 @@ An OpenSearch node in its default configuration (with demo certificates and user
       ```
    - Query the plugins endpoint:
       ```bat
-      curl.exe -X GET https://localhost:9200/_cat/plugins?v -u "admin:admin" --insecure
+      curl.exe -X GET https://localhost:9200/_cat/plugins?v -u "admin:< Admin password >" --insecure
       ```
       {% include copy.html %}
 

_install-and-configure/upgrade-opensearch/appendix/rolling-upgrade-lab.md

@@ -125,7 +125,7 @@
    1. Press `Ctrl+C` to stop following container logs and return to the command prompt.
 1. Use cURL to query the OpenSearch REST API. In the following command, `os-node-01` is queried by sending the request to host port `9201`, which is mapped to port `9200` on the container:
    ```bash
-   curl -s "https://localhost:9201" -ku admin:admin
+   curl -s "https://localhost:9201" -ku admin:< Admin password >
    ```
    {% include copy.html %}
    <p class="codeblock-label">Example response</p>
@@ -177,7 +177,7 @@
    curl -H "Content-Type: application/x-ndjson" \
       -X PUT "https://localhost:9201/ecommerce?pretty" \
       --data-binary "@ecommerce-field_mappings.json" \
-      -ku admin:admin
+      -ku admin:< Admin password >
    ```
    {% include copy.html %}
    <p class="codeblock-label">Example response</p>
@@ -193,7 +193,7 @@
    curl -H "Content-Type: application/x-ndjson" \
       -X PUT "https://localhost:9201/ecommerce/_bulk?pretty" \
       --data-binary "@ecommerce.json" \
-      -ku admin:admin
+      -ku admin:< Admin password >
    ```
    {% include copy.html %}
    <p class="codeblock-label">Example response (truncated)</p>
@@ -226,7 +226,7 @@
    curl -H 'Content-Type: application/json' \
       -X GET "https://localhost:9201/ecommerce/_search?pretty=true&filter_path=hits.total" \
       -d'{"query":{"match":{"customer_first_name":"Sonya"}}}' \
-      -ku admin:admin
+      -ku admin:< Admin password >
    ```
    {% include copy.html %}
    <p class="codeblock-label" id="query-validation">Example response</p>
@@ -271,7 +271,7 @@
    curl -H 'Content-Type: application/json' \
       -X PUT "https://localhost:9201/_snapshot/snapshot-repo?pretty" \
       -d '{"type":"fs","settings":{"location":"/usr/share/opensearch/snapshots"}}' \
-      -ku admin:admin
+      -ku admin:< Admin password >
    ```
    {% include copy.html %}
    <p class="codeblock-label">Example response</p>
@@ -284,7 +284,7 @@
    ```bash
    curl -H 'Content-Type: application/json' \
       -X POST "https://localhost:9201/_snapshot/snapshot-repo/_verify?timeout=0s&master_timeout=50s&pretty" \
-      -ku admin:admin
+      -ku admin:< Admin password >
    ```
    {% include copy.html %}
    <p class="codeblock-label">Example response</p>
@@ -315,7 +315,7 @@
    ```bash
    curl -H 'Content-Type: application/json' \
       -X PUT "https://localhost:9201/_snapshot/snapshot-repo/cluster-snapshot-v137?wait_for_completion=true&pretty" \
-      -ku admin:admin
+      -ku admin:< Admin password >
    ```
    {% include copy.html %}
    <p class="codeblock-label">Example response</p>
@@ -448,7 +448,7 @@
    curl -H 'Content-type: application/json' \
       -X PUT "https://localhost:9201/_cluster/settings?pretty" \
       -d'{"persistent":{"cluster.routing.allocation.enable":"primaries"}}' \
-      -ku admin:admin
+      -ku admin:< Admin password >
    ```
    {% include copy.html %}
    <p class="codeblock-label">Example response</p>
@@ -469,7 +469,7 @@
    ```
 1. Perform a flush operation on the cluster to commit transaction log entries to the Lucene index:
    ```bash
-   curl -X POST "https://localhost:9201/_flush?pretty" -ku admin:admin
+   curl -X POST "https://localhost:9201/_flush?pretty" -ku admin:< Admin password >
    ```
    {% include copy.html %}
    <p class="codeblock-label">Example response</p>
@@ -514,7 +514,7 @@
 1. **Optional**: Query the cluster to determine which node is acting as the cluster manager. You can run this command at any time during the process to see when a new cluster manager is elected:
    ```bash
    curl -s "https://localhost:9201/_cat/nodes?v&h=name,version,node.role,master" \
-      -ku admin:admin | column -t
+      -ku admin:< Admin password > | column -t
    ```
    {% include copy.html %}
    <p class="codeblock-label">Example response</p>
@@ -528,7 +528,7 @@
 1. **Optional**: Query the cluster to see how shard allocation changes as nodes are removed and replaced. You can run this command at any time during the process to see how shard statuses change:
    ```bash
    curl -s "https://localhost:9201/_cat/shards" \
-      -ku admin:admin
+      -ku admin:< Admin password >
    ```
    {% include copy.html %}
    <p class="codeblock-label">Example response</p>
@@ -644,7 +644,7 @@
 1. Confirm that your cluster is running the new version:
    ```bash
    curl -s "https://localhost:9201/_cat/nodes?v&h=name,version,node.role,master" \
-      -ku admin:admin | column -t
+      -ku admin:< Admin password > | column -t
    ```
    {% include copy.html %}
    <p class="codeblock-label">Example response</p>
@@ -700,7 +700,7 @@
    curl -H 'Content-type: application/json' \
       -X PUT "https://localhost:9201/_cluster/settings?pretty" \
       -d'{"persistent":{"cluster.routing.allocation.enable":"all"}}' \
-      -ku admin:admin
+      -ku admin:< Admin password >
    ```
    {% include copy.html %}
    <p class="codeblock-label">Example response</p>
@@ -735,7 +735,7 @@
 1. Verify the current running version of your OpenSearch nodes:
    ```bash
    curl -s "https://localhost:9201/_cat/nodes?v&h=name,version,node.role,master" \
-      -ku admin:admin | column -t
+      -ku admin:< Admin password > | column -t
    ```
    {% include copy.html %}
    <p class="codeblock-label">Example response</p>
@@ -781,7 +781,7 @@
 
 1. Query the [Cluster health]({{site.url}}{{site.baseurl}}/api-reference/cluster-api/cluster-health/) API endpoint to see information about the health of your cluster. You should see a status of `green`, which indicates that all primary and replica shards are allocated:
    ```bash
-   curl -s "https://localhost:9201/_cluster/health?pretty" -ku admin:admin
+   curl -s "https://localhost:9201/_cluster/health?pretty" -ku admin:< Admin password >
    ```
    {% include copy.html %}
    <p class="codeblock-label">Example response</p>
@@ -808,7 +808,7 @@
    ```
 1. Query the [CAT shards]({{site.url}}{{site.baseurl}}/api-reference/cat/cat-shards/) API endpoint to see how shards are allocated after the cluster is upgrade:
    ```bash
-   curl -s "https://localhost:9201/_cat/shards" -ku admin:admin
+   curl -s "https://localhost:9201/_cat/shards" -ku admin:< Admin password >
    ```
    {% include copy.html %}
    <p class="codeblock-label">Example response</p>
@@ -860,7 +860,7 @@
    curl -H 'Content-Type: application/json' \
       -X GET "https://localhost:9201/ecommerce/_search?pretty=true&filter_path=hits.total" \
       -d'{"query":{"match":{"customer_first_name":"Sonya"}}}' \
-      -ku admin:admin
+      -ku admin:< Admin password >
    ```
    {% include copy.html %}
    <p class="codeblock-label">Example response</p>