Make sure opensearch dashboards runs #5

New issue

Closed

opened 2025-12-01 14:58:06 +00:00 by acute · 2 comments

acute commented

2025-12-01 14:58:06 +00:00

Owner

No description provided.

acute commented

2025-12-03 15:58:45 +00:00

Author

Owner

existing link config for dashboards:

opensearch.hosts: [https://opensearch:9200]
opensearch.ssl.verificationMode: none
opensearch.requestHeadersAllowlist:
[
"securitytenant",
"Authorization",
"x-forwarded-for",
"x-forwarded-user",
"x-forwarded-roles",
]
opensearch_security.auth.type: "proxy"
opensearch_security.proxycache.user_header: "x-forwarded-user"
opensearch_security.proxycache.roles_header: "x-forwarded-roles"
opensearch_security.multitenancy.enabled: true
opensearch_security.multitenancy.tenants.enable_global: true
opensearch_security.multitenancy.tenants.enable_private: true
opensearch_security.multitenancy.tenants.preferred: [Private, Global]
opensearch_security.cookie.secure: false
server.host: "0.0.0.0"
server.basePath: "/link/dashboards"
server.rewriteBasePath: false

This eventual needs to have the following added (or overwritten):

server.host: "0.0.0.0"
server.port: 5601
server.name: "aberdeen-dashboards"

opensearch.hosts: ["https://aberdeen-opensearch:9200"]
opensearch.ssl.verificationMode: certificate
opensearch.ssl.certificateAuthorities:
["/usr/share/opensearch-dashboards/config/certs/ca.pem"]
opensearch.username: "admin"
opensearch.password: "admin"

opensearch.requestHeadersAllowlist: ["securitytenant", "Authorization"]
opensearch_security.multitenancy.enabled: true
opensearch_security.multitenancy.tenants.enable_global: true
opensearch_security.multitenancy.tenants.enable_private: true
opensearch_security.multitenancy.tenants.preferred: ["Private", "Global"]
opensearch_security.readonly_mode.roles: ["kibana_read_only"]

existing link config for dashboards: opensearch.hosts: [https://opensearch:9200] opensearch.ssl.verificationMode: none opensearch.requestHeadersAllowlist: [ "securitytenant", "Authorization", "x-forwarded-for", "x-forwarded-user", "x-forwarded-roles", ] opensearch_security.auth.type: "proxy" opensearch_security.proxycache.user_header: "x-forwarded-user" opensearch_security.proxycache.roles_header: "x-forwarded-roles" opensearch_security.multitenancy.enabled: true opensearch_security.multitenancy.tenants.enable_global: true opensearch_security.multitenancy.tenants.enable_private: true opensearch_security.multitenancy.tenants.preferred: [Private, Global] opensearch_security.cookie.secure: false server.host: "0.0.0.0" server.basePath: "/link/dashboards" server.rewriteBasePath: false This eventual needs to have the following added (or overwritten): server.host: "0.0.0.0" server.port: 5601 server.name: "aberdeen-dashboards" opensearch.hosts: ["https://aberdeen-opensearch:9200"] opensearch.ssl.verificationMode: certificate opensearch.ssl.certificateAuthorities: ["/usr/share/opensearch-dashboards/config/certs/ca.pem"] opensearch.username: "admin" opensearch.password: "admin" opensearch.requestHeadersAllowlist: ["securitytenant", "Authorization"] opensearch_security.multitenancy.enabled: true opensearch_security.multitenancy.tenants.enable_global: true opensearch_security.multitenancy.tenants.enable_private: true opensearch_security.multitenancy.tenants.preferred: ["Private", "Global"] opensearch_security.readonly_mode.roles: ["kibana_read_only"]

acute commented

2025-12-03 16:24:01 +00:00

Author

Owner

opensearch.hosts: [https://opensearch:9200]
opensearch.ssl.verificationMode: none
opensearch.requestHeadersAllowlist:
[
"securitytenant",
"Authorization",
"x-forwarded-for",
"x-forwarded-user",
"x-forwarded-roles",
]
opensearch_security.auth.type: "proxy"
opensearch_security.proxycache.user_header: "x-forwarded-user"
opensearch_security.proxycache.roles_header: "x-forwarded-roles"
opensearch_security.multitenancy.enabled: true
opensearch_security.multitenancy.tenants.enable_global: true
opensearch_security.multitenancy.tenants.enable_private: true
opensearch_security.multitenancy.tenants.preferred: [Private, Global]
opensearch_security.cookie.secure: false
server.basePath: "/link/dashboards"
server.rewriteBasePath: false

opensearch.username: "admin"
opensearch.password: "admin"

server.host: "0.0.0.0"
# New config that adds to or overrides existing one:
#
# server.port: 5601
# server.name: "nextgen-dashboards"
# opensearch.hosts: ["https://aberdeen-opensearch:9200"]
# opensearch.ssl.verificationMode: certificate
# opensearch.ssl.certificateAuthorities:
# ["/usr/share/opensearch-dashboards/config/certs/ca.pem"]

# opensearch.requestHeadersAllowlist: ["securitytenant", "Authorization"]
# opensearch_security.readonly_mode.roles: ["kibana_read_only"]

``` opensearch.hosts: [https://opensearch:9200] opensearch.ssl.verificationMode: none opensearch.requestHeadersAllowlist: [ "securitytenant", "Authorization", "x-forwarded-for", "x-forwarded-user", "x-forwarded-roles", ] opensearch_security.auth.type: "proxy" opensearch_security.proxycache.user_header: "x-forwarded-user" opensearch_security.proxycache.roles_header: "x-forwarded-roles" opensearch_security.multitenancy.enabled: true opensearch_security.multitenancy.tenants.enable_global: true opensearch_security.multitenancy.tenants.enable_private: true opensearch_security.multitenancy.tenants.preferred: [Private, Global] opensearch_security.cookie.secure: false server.basePath: "/link/dashboards" server.rewriteBasePath: false opensearch.username: "admin" opensearch.password: "admin" server.host: "0.0.0.0" # New config that adds to or overrides existing one: # # server.port: 5601 # server.name: "nextgen-dashboards" # opensearch.hosts: ["https://aberdeen-opensearch:9200"] # opensearch.ssl.verificationMode: certificate # opensearch.ssl.certificateAuthorities: # ["/usr/share/opensearch-dashboards/config/certs/ca.pem"] # opensearch.requestHeadersAllowlist: ["securitytenant", "Authorization"] # opensearch_security.readonly_mode.roles: ["kibana_read_only"] ```