Authorize Opensearch Dashboard in http mode

OpenSearch Dashboards
1

Versions (relevant - OpenSearch/Dashboard/Server OS/Browser):
MacOS 13.2.1 ARMx64 / Google Chrome Version 110.0.5481.177 (Official Build) (arm64)

Describe the issue:
Could not authorize into dashboard when opensearch-security disabled, that is in http mode.
This is uncomfortable while testing some issues and want to see in the dashboard changes which caused by tests. I think http mode is enough for testing purposes.

Configuration:

docker-compose.yml

version: ‘3’

services:

opensearch:
build:
context: .
dockerfile: Dockerfile.opensearch
args:
- SECURE_INTEGRATION=${SECURE_INTEGRATION:-false}
- OPENSEARCH_VERSION=${OPENSEARCH_VERSION:-latest}
environment:
- discovery.type=single-node
- bootstrap.memory_lock=true
- path.repo=/usr/share/opensearch/mnt
ports:
- “9200:9200”
user: opensearch

Dockerfile

ARG OPENSEARCH_VERSION
FROM opensearchproject/opensearch:${OPENSEARCH_VERSION}

ARG opensearch_path=/usr/share/opensearch
ARG SECURE_INTEGRATION

RUN if [ “$SECURE_INTEGRATION” != “true” ] ; then $opensearch_path/bin/opensearch-plugin remove opensearch-security; fi

2

Ah you will need to add the following to OpenSearch Dashboards to disable it on that side as well.

Edit* I promise this link leads to a specific section for disabling it on dashboards as well, despite what the preview shows

3

Seems to you does not look into my question. That is a problem, authentication does not work when security plugin disabled.

4

@zethuman when security plugin is disabled, the authentication and secure transport are also not being used (disabled). At the moment, there are no toggles to turn on/off just some security features, I think this is the issue [1] you may be interested in.

[1] [FEATURE] Allow to disable SSL/TLS communication · Issue #2414 · opensearch-project/security · GitHub

1 Like