Dashboard not connecting when trying to use something other than default security

[jonathon2nd]

I opened an issue here: opensearch-project/OpenSearch-Dashboards#2712
But I think I may have opened it in the wrong repo :/

TLDR; trying to set different admin and dashboarduser passwords causes dashboard to not connect after the cluster is up and ready.

Any input would be greatly appreciated :D

[swoehrl-mw]

Hi @jonathon2nd
I think I see the issue: You are supplying the new/changed password for dashboards via additionalConfig. This is not only insecure (as the password is written in cleartext), it is also overwritten because the operator supplies the password via envvar.
Please create a secret with your changed credentials that dashboards should use (keys username and password) and then set dashboards.opensearchCredentialsSecret like this:

spec:
  dashboards:
    opensearchCredentialsSecret:
      name: dashboards-credentials

Can you please try if this approach solves your problem?

[jonathon2nd]

That does work! I had to change it to using admin to test and see, because dashboard user has not role in the example, checked here too. No big deal, I will get familiar with this and we will write what we need for our usecase.

Thanks for letting me know, maybe that should be added somewhere to https://github.com/Opster/opensearch-k8s-operator/blob/main/docs/userguide/main.md or baked into one of the examples so that it is easier to find for the next person.

[idanl21]

Hey @jonathon2nd, cam you please share here your Yaml file?

[jonathon2nd]

opensearch-example.txt
I was able to use this, hash your own passwords in the node pod
[opensearch@my-cluster-masters-0 ~]$ /usr/share/opensearch/plugins/opensearch-security/tools/hash.sh

[swoehrl-mw]

@jonathon2nd
Good to know it worked for you.
I've made a note to add this to the docs (I've got a revamp of the usergide planned anyway).

Closing this as completed.