Question about the On-Behalf-Of feature

Security
1

Hi all,

I highly appreciate explanation on the below in docs of On-Behalf-Of feature. Aren’t the signing and encryption keys distributed to all nodes automatically sine they are set as part of config.yml (security index) which is expected to be visible to all nodes?

“Both the signing key and the encryption key are base64 encoded and stored on the OpenSearch node’s file system. The keys should be the same on all hosts.”

2

@asfoorial yes, you are correct, The configuration is stored in security index and is not needed to be present in the filesystem. The docs will be updated shortly.

1 Like