To reset the OpenSearch security configuration

Purpose

If all of the following are true in an NSP cluster, you must reset the OpenSearch security configuration used by Log Viewer in the cluster.

  • A custom TLS certificate is used.

  • The deleteOnUndeploy parameter in the nsp-config.yml file is set to false.

  • You have undeployed, and then redeployed, the NSP cluster.

Steps
 
1 

Log in as the root user on the NSP cluster host.

2 

Open a console window.

3 

Enter the following:

# kubectl exec -it opensearch-cluster-master-0 -n nsp-psa-restricted bash ↵

4 

Enter the following:

# /usr/share/opensearch/plugins/opensearch-security/tools/securityadmin.sh -cacert /usr/share/opensearch/config/root-ca.pem -cert /usr/share/opensearch/config/kirk.pem -key /usr/share/opensearch/config/kirk-key.pem -cd /usr/share/opensearch/config/opensearch-security/ ↵

The OpenSearch security configuration is reset.

5 

Close the console window.

End of steps