Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add support for disabling TLS witohut rebuilding docker image #1045

Closed
pavolloffay opened this issue Aug 4, 2021 · 3 comments
Closed

Add support for disabling TLS witohut rebuilding docker image #1045

pavolloffay opened this issue Aug 4, 2021 · 3 comments
Labels
enhancement Enhancement or improvement to existing feature or request

Comments

@pavolloffay
Copy link

Is your feature request related to a problem? Please describe.

I would like to run docker image opensearchproject/opensearch:1.0.0 without requiring HTTPS

Describe the solution you'd like

Pass environment variable to disable TLS e.g.

docker run -p 9200:9200 -p 9600:9600 -e "discovery.type=single-node" -e "http.host=0.0.0.0" -e "plugins.security.disabled:true"  --rm -it opensearchproject/opensearch:1.0.0  

Describe alternatives you've considered

Additional context

Running without TLS is useful for tests and demos.

@pavolloffay pavolloffay added the enhancement Enhancement or improvement to existing feature or request label Aug 4, 2021
@jkowall
Copy link
Contributor

jkowall commented Aug 4, 2021

@pavolloffay Thanks for bringing this up, this is related to a similar discussion we are having #1029 I mentioned this specific issue related to Jaeger and most other OSS projects.

For those who do not know @pavolloffay is a maintainer of both Jaeger and OpenTelemetry.

@frotsch
Copy link
Contributor

frotsch commented Aug 5, 2021

docker run -p 9200:9200 -p 9600:9600 -e "discovery.type=single-node" -e "http.host=0.0.0.0" -e "plugins.security.disabled=true" --rm -it opensearchproject/opensearch:1.0.0

curl http://localhost:9200

works for me! But it disables also RBAC!

You should see something like that in the logs: [2021-08-05T09:32:16,690][WARN ][o.o.s.OpenSearchSecurityPlugin] [xxx] OpenSearch Security plugin installed but disabled. This can expose your configuration (including passwords) to the public.

@pavolloffay
Copy link
Author

Doh I have a typo there plugins.security.disabled:true it should be plugins.security.disabled=true

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement Enhancement or improvement to existing feature or request
Projects
None yet
Development

No branches or pull requests

3 participants