Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add configuration flag to disable system index permissions #2845

Closed
Tracked by #2529
peternied opened this issue Jun 8, 2023 · 1 comment · Fixed by #2887
Closed
Tracked by #2529

Add configuration flag to disable system index permissions #2845

peternied opened this issue Jun 8, 2023 · 1 comment · Fixed by #2887
Assignees
Labels
triaged Issues labeled as 'Triaged' have been reviewed and are deemed actionable.

Comments

@peternied
Copy link
Member

peternied commented Jun 8, 2023

Problem:

System index permissions allow access to data on clusters that was previously not accessible. For services that operate managed OpenSearch clusters they could want to restriction based on custom index / plugins configuration.

Proposed solution:

Check for a value in the security config something like "system index permissions disabled".

  • For existing clusters that migrate to the latest version, the features should be disabled by default.
  • For new clusters, the feature should be enabled by default.
@github-actions github-actions bot added the untriaged Require the attention of the repository maintainers and may need to be prioritized label Jun 8, 2023
@peternied peternied removed the untriaged Require the attention of the repository maintainers and may need to be prioritized label Jun 8, 2023
@stephen-crawford
Copy link
Contributor

[Triage] Hi @peternied, this sounds like a good request considering the discussions around system indices. I think that @cwperks will have some suggestions on what may fall under this as well and may want to follow up here.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
triaged Issues labeled as 'Triaged' have been reviewed and are deemed actionable.
Projects
None yet
Development

Successfully merging a pull request may close this issue.

3 participants