Can opensearch.keystore (not jks/pkcs12) be copied across nodes?

Hello,

In the documentation it says that to add an email sender we also have to add its username and password to opensearch.keystore like this:

./bin/opensearch-keystore add plugins.alerting.destination.email.<sender>.username
./bin/opensearch-keystore add plugins.alerting.destination.email.<sender>.password

Is it safe to create this file locally and mount it to containers as readonly via configMaps on k8s and configs/bind mounts on docker?

1 Like