opensearch-project / helm-charts

:wheel_of_dharma: A community repository for Helm Charts of OpenSearch Project.
https://opensearch.org/docs/latest/opensearch/install/helm/
Apache License 2.0
170 stars 228 forks source link

[BUG] system_indices missing some default plugin indices in the helm chart opensearch values.yaml file #479

Open Flyingliuhub opened 12 months ago

Flyingliuhub commented 12 months ago

Describe the bug There are some default plugin's system_indices missing in the OpenSearch/values.yaml, please see the security plugin's system_indices list

To Reproduce Compare helm chart opensearch's value.yaml and security plugin's install_demo_configuration.sh

Expected behavior A clear and concise description of what you expected to happen.

Chart Name OpenSearch

Screenshots N/A

Host/Environment (please complete the following information):

Additional context Add any other context about the problem here.

ylwu-amzn commented 12 months ago

This is something we should prioritize. Some system index stores important data. Missing system index in the helm-chats configuration will cause security issue. All teams maintain their system index in security plugin's install_demo_configuration.sh , I'd suggest use some way to sync from security plugin, or at least check if they are consistent with some cron job.

stephen-crawford commented 12 months ago

@ylwu-amzn's suggestion to use the Security plugin's framework is a good path forward. You can always grab the different versions from the published versions on the security repos and then map 1:1 to the different helm-chart versions. To pull this in you can checkout the file from the security repos during your workflow process and then insert it using github actions. Alternatively you can look at some bash based solutions to this.

prudhvigodithi commented 11 months ago

[Untriage] Adding @tranngocsongtruc @SkollRyu @premkirank can you please take a look?