compliantkubernetes-apps icon indicating copy to clipboard operation
compliantkubernetes-apps copied to clipboard

Restore opensearch system indices

Open OlleLarsson opened this issue 2 years ago • 0 comments

Is your feature request related to a problem? Please describe.

We have enabled system indices in opensearch, see here. The official documentation for system indices is found here.

From the docs

Indices configured as system indices can be accessed by only super-admin and no role will provide access to these indices.

Here's the problem, a super-admin is a request that includes admin certificates, and as we have not enables tls on the 9200 port we cannot become super-admins.

Having system indices is a sound idea but we do need to be able to restore them, especially .opendistro-alerting-config as we offer that feature to customers.

Describe the solution you'd like

I have no clear solution for this expect that the outcome must be that we can restore indices that contain the configuration for let's say the alerting/monitoring plugin. Maybe the solution is to

  • disable system indices,
  • remove certain indices from the list,
  • or to make it possible to issue super-admin requests.

The person picking this task will have list pros and cons for each option.

Describe alternatives you've considered None

Additional context

Definition of done: "System indices" can be restored.

OlleLarsson avatar Mar 29 '22 06:03 OlleLarsson