Skip to content

Commit 2a403be

Browse files
docs: Remove outdated warning for plugins.security.nodes_dn (#156)
1 parent ba7a8ba commit 2a403be

1 file changed

Lines changed: 0 additions & 7 deletions

File tree

docs/modules/opensearch/pages/usage-guide/security.adoc

Lines changed: 0 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -182,13 +182,6 @@ Defaults to the `tls` SecretClass and can't be disabled.
182182
<3> The lifetime for autoTls certificates generated by the secret operator.
183183
Only a lifetime up to the `maxCertificateLifetime` setting in the SecretClass is applied.
184184

185-
[IMPORTANT]
186-
====
187-
The operator sets the configuration `plugins.security.nodes_dn` to `["CN=generated certificate for pod"]`, which provides weak authentication between nodes.
188-
For enhanced security, use certificates that uniquely identify the OpenSearch nodes.
189-
In this case, you must also adapt the `plugins.security.nodes_dn` setting via configOverrides.
190-
====
191-
192185
== Disabling security
193186

194187
The OpenSearch security plugin can be disabled as follows:

0 commit comments

Comments
 (0)