Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[BUG] Helm install after uninstall doesn't update the security config #483

Closed
bagipriyank opened this issue Sep 14, 2023 · 3 comments
Closed
Labels
bug Something isn't working untriaged Issues that have not yet been triaged

Comments

@bagipriyank
Copy link

What is the bug?

Helm install after uninstall of opensearch doesn't update the security config

How can one reproduce the bug?

Helm install opensearch with

      config.yml: |-
        _meta:
          type: "config"
          config_version: "2"
        config:
          dynamic:
            http:
              anonymous_auth_enabled: false
            authc:
              basic_internal_auth_domain:
                description: "Authenticate via HTTP Basic against internal users database"
                http_enabled: true
                transport_enabled: true
                order: 0
                http_authenticator:
                  type: basic
                  challenge: true
                authentication_backend:
                  type: intern
              saml_auth_domain:
                order: 1
                description: "SAML provider"
                http_enabled: true
                transport_enabled: false
                http_authenticator:
                  type: saml
                  challenge: true
                  config:
                    idp:
                      metadata_url: ${idp_metadata_url}
                      entity_id: ${idp_entity_id}
                    sp:
                      entity_id: ${sp_entity_id}
                    kibana_url: ${kibana_url}
                    exchange_key : ${exchange_key}
                    roles_key: Roles
                authentication_backend:
                  type: noop

notice the value of challenge is true for basic_internal_auth_domain

Now do helm uninstall do get rid of the pods, and then do helm install again. This time use challenge: false for basic_internal_auth_domain.

What is the expected behavior?

Value of challenge should update in config/opensearch-security/config.yml to false but it stays as true

Do you have any additional context?

https://forum.opensearch.org/t/azure-sso-integration-issue/15745/10?u=pbagrecha

Please let me know if this is not the right repository, and if you can point me to the right place.

@bagipriyank bagipriyank added bug Something isn't working untriaged Issues that have not yet been triaged labels Sep 14, 2023
@jordarlu
Copy link

Hi, @peterzhuamazon , @gaiksaya , @prudhvigodithi , could you help move this issue to helm-charts repo, thanks

@gaiksaya gaiksaya transferred this issue from opensearch-project/docker-images Oct 16, 2023
@smlx
Copy link
Contributor

smlx commented Oct 17, 2023

This is a duplicate of #303

@peterzhuamazon peterzhuamazon removed the untriaged Issues that have not yet been triaged label Oct 24, 2023
@peterzhuamazon
Copy link
Member

Close this as it is duplicate to #303.

@bagipriyank bagipriyank closed this as not planned Won't fix, can't repro, duplicate, stale Oct 24, 2023
@bagipriyank bagipriyank reopened this Oct 24, 2023
@github-actions github-actions bot added the untriaged Issues that have not yet been triaged label Oct 24, 2023
@bagipriyank bagipriyank closed this as not planned Won't fix, can't repro, duplicate, stale Oct 24, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working untriaged Issues that have not yet been triaged
Projects
None yet
Development

No branches or pull requests

4 participants