compliantkubernetes-apps
compliantkubernetes-apps copied to clipboard
Restore opensearch system indices
Is your feature request related to a problem? Please describe.
We have enabled system indices in opensearch, see here. The official documentation for system indices is found here.
From the docs
Indices configured as system indices can be accessed by only super-admin and no role will provide access to these indices.
Here's the problem, a super-admin is a request that includes admin certificates, and as we have not enables tls on the 9200 port we cannot become super-admins.
Having system indices is a sound idea but we do need to be able to restore them, especially .opendistro-alerting-config
as we offer that feature to customers.
Describe the solution you'd like
I have no clear solution for this expect that the outcome must be that we can restore indices that contain the configuration for let's say the alerting/monitoring plugin. Maybe the solution is to
- disable system indices,
- remove certain indices from the list,
- or to make it possible to issue super-admin requests.
The person picking this task will have list pros and cons for each option.
Describe alternatives you've considered None
Additional context
Definition of done: "System indices" can be restored.