Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[BUG] on opensearch 2.0.0, securityadmin.sh is still looking for whitelist.yml instead of allowlist.yml #1879

Closed
phijojo opened this issue Jun 8, 2022 · 2 comments
Labels
bug Something isn't working v2.1.0

Comments

@phijojo
Copy link

phijojo commented Jun 8, 2022

What is the bug?
While running the script securityadmin.sh on OpenSearch 2.0.0, I can see it is checking for whitelist.yml. According to the documentation, the whitelist.yml is deprecated and is replaced with allowlist.yml in 2.0.0. It reproducible on docker images

How can one reproduce the bug?
Steps to reproduce the behavior:

  1. add allowlist.yml on /usr/share/opensearch/plugins/opensearch-security/securityconfig/
  2. Go to /usr/share/opensearch/plugins/opensearch-security/tools
  3. Run securtiyadmin.sh
    ./securityadmin.sh -cd ../securityconfig/ -icl -nhnv -cacert ../../../config/certs/ca.crt -cert ../../../config/certs/admin.pem -key ../../../config/certs/admin.key
  4. See error

What is the expected behavior?
While running the script . It should accept allowlist.yml instead of whitelist.yml. The script should not be expected to look for whitelist.yml on 2.0.0 images

What is your host/environment?

  • OS: Linux, Docker,Kubernetes
  • Version:
  • Plugins: Security

Do you have any screenshots?
running securityadmin.sh without whitelist.yml
image

When adding whitelist.yml, its works fine

Do you have any additional context?
This is a blocker for PR

@phijojo phijojo added bug Something isn't working untriaged Require the attention of the repository maintainers and may need to be prioritized labels Jun 8, 2022
@peternied
Copy link
Member

[Triage] Thanks for filing this issue. @cliu123 do you have more context on this issue you could added?

@peternied peternied added v2.1.0 and removed untriaged Require the attention of the repository maintainers and may need to be prioritized labels Jun 13, 2022
@cliu123
Copy link
Member

cliu123 commented Jun 13, 2022

@phijojo The allowlist config and API will be introduced in OpenSearch 2.1.0 release as planned. We do apologize that the documentation does not reflect the accurate information.
Please re-open the issue if you have more questions/concerns on this.

@cliu123 cliu123 closed this as completed Jun 13, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working v2.1.0
Projects
None yet
Development

No branches or pull requests

3 participants