camunda / camunda

Process Orchestration Framework
https://camunda.com/platform/
3.33k stars 610 forks source link

Operate OpenSearch AWS config can't be disabled. #20939

Closed ralfpuchert closed 2 months ago

ralfpuchert commented 3 months ago

Describe the bug

If Operate is configured to use OpenSearch as database it looks for AWS configuration. If a configuration is found it tries to setup AWS. This prevents using other mechanisms such as basic authentication (via the operate.opensearch.username/password properties; see also the corresponding docs).

In order to disable AWS setup even if AWS configuration exists Operate needs a configuration like Zeebe: camunda.operate.opensearch.awsEnabled=[true|false] (default false).

Additionally helm charts must be updated to use this configuration for helm chart config: global.opensearch.aws.enabled .

Related to Support issue 23119

Tasks

To Reproduce

Steps to reproduce the behavior:

  1. Use Operate with OpenSearch on AWS
  2. Try to use without AWS with basic authentication for example
  3. Look for exceptions with messages related to security, permissions like
    [security_exception] no permissions for ...

Current behavior

Operate can't connect to OpenSearch on AWS if an AWS configuration exists in the environment.

Expected behavior

Operate can be used with OpenSearch on AWS even if a AWS configuration exists in the environment.

Environment


Acceptance Criteria

Definition of Ready - Checklist

For UI changes required to solve the bug:

Implementation

:mag: Root Cause Analysis

:thought_balloon: Proposed Solution

:point_right: Handover Dev to QA

:green_book: Link to the test case

ThorbenLindhauer commented 3 months ago

Added to September patches