As part of T350516, enabling the OpenSearch security plugin requires clients to authenticate themselves against the OpenSearch API. To keep the checks that scap does on deployment working seamlessly, scap should support providing authentication when querying the OpenSearch API.
Description
Description
Details
Details
Related Changes in Gerrit:
Customize query in gerrit
Related Changes in GitLab:
| Title | Reference | Author | Source Branch | Dest Branch | |
|---|---|---|---|---|---|
| logstash: Support HTTP basic auth for logstash queries | repos/releng/scap!1242 | dancy | master-I30f17105e21d7dd0e2b7bf1ff31db6620e2b3d54 | master |
| Status | Subtype | Assigned | Task | ||
|---|---|---|---|---|---|
| Resolved | • fgiunchedi | T213157 Increase utilization of application logging pipeline (FY2018-2019 Q3 TEC6) | |||
| Resolved | • fgiunchedi | T220103 TEC6: Logging infrastructure (Q4 2018/19 goal) | |||
| Open | colewhite | T213902 Implement sensitive logstash access control | |||
| Open | None | T350516 Enable OpenSearch security plugin - Beta Logs | |||
| Open | None | T434114 Scap support of http basic auth for Logstash queries |
Event Timeline
Comment Actions
dancy opened https://gitlab.wikimedia.org/repos/releng/scap/-/merge_requests/1242
logstash: Support HTTP basic auth for logstash queries
Comment Actions
Change #1321653 had a related patch set uploaded (by Ahmon Dancy; author: Ahmon Dancy):
[operations/puppet@production] scap: Add optional logstash credentials file
Comment Actions
dancy merged https://gitlab.wikimedia.org/repos/releng/scap/-/merge_requests/1242
logstash: Support HTTP basic auth for logstash queries
Comment Actions
Change #1322080 had a related patch set uploaded (by Cwhite; author: Cwhite):
[operations/puppet@production] beta-logs: enable and configure logs-api
Comment Actions
Change #1322081 had a related patch set uploaded (by Cwhite; author: Cwhite):
[operations/puppet@production] opensearch httpd: add manage_local_users toggle
Comment Actions
Change #1322081 merged by Cwhite:
[operations/puppet@production] opensearch httpd: add manage_local_users toggle
Comment Actions
Change #1322115 had a related patch set uploaded (by Cwhite; author: Cwhite):
[operations/puppet@production] profile: set default accounts and groups for api::httpd_proxy
Comment Actions
Change #1322115 merged by Cwhite:
[operations/puppet@production] profile: set default accounts and groups for api::httpd_proxy
Comment Actions
Change #1322080 merged by Cwhite:
[operations/puppet@production] beta-logs: enable and configure logs-api
Comment Actions
Change #1322144 had a related patch set uploaded (by Cwhite; author: Cwhite):
[operations/puppet@production] profile: add parameter to fix duplicate declaration in beta
Comment Actions
Change #1322144 merged by Cwhite:
[operations/puppet@production] profile: add parameter to fix duplicate declaration in beta
Comment Actions
Change #1322149 had a related patch set uploaded (by Cwhite; author: Cwhite):
[operations/puppet@production] profile: fix typo in opensearch::api::httpd_proxy
Comment Actions
Change #1322149 merged by Cwhite:
[operations/puppet@production] profile: fix typo in opensearch::api::httpd_proxy
Comment Actions
Change #1322159 had a related patch set uploaded (by Cwhite; author: Cwhite):
[operations/puppet@production] beta-logs: disable ssl requirement for logs-api
Comment Actions
Change #1322159 merged by Cwhite:
[operations/puppet@production] beta-logs: disable ssl requirement for logs-api
Comment Actions
Change #1322837 had a related patch set uploaded (by Cwhite; author: Cwhite):
[operations/puppet@production] logs-api: allow GET POST for $index/_search endpoint
Comment Actions
Change #1322837 merged by Cwhite:
[operations/puppet@production] logs-api: allow GET POST for $index/_search endpoint