How to bootstrap a cluster to enable security plugin in production

Security
1

what is the difference between opendistro_security.allow_default_init_securityindex and securityadmin.sh?

In production, if I configured certs and internal_users, roles, etc correctly, can I use opendistro_security.allow_default_init_securityindex: true to bootstrap the cluster?
Or do I have to run securityadmin.sh at least once to bootstrap?

I am trying to find what does opendistro_security.allow_default_init_securityindex do from the doc, but I can not find. can someone help explain?

Thanks

2

Hello @yuecong

You would have to use securityadmin.sh with custom configuration and certificates.
“opendistro_security.allow_default_init_securityindex: true” allows to run install_demo_configuration.sh which initialize demo certificates, configuration and uploads to security plugin in ES.