Skip to content

Commit

Permalink
PR Feedback
Browse files Browse the repository at this point in the history
Signed-off-by: Peter Nied <[email protected]>
Signed-off-by: Peter Nied <[email protected]>
  • Loading branch information
peternied authored Dec 13, 2022
1 parent 3916136 commit afe7fb9
Showing 1 changed file with 7 additions and 5 deletions.
12 changes: 7 additions & 5 deletions IDENTITY_USE_CASES.md
Original file line number Diff line number Diff line change
@@ -1,11 +1,12 @@
# Identity Use Cases in OpenSearch

- [Identity Use Cases in OpenSearch](#identity-use-cases-in-opensearch)
- [Non-use compatibility](#non-use-compatibility)
- [Backwards compatibility](#backwards-compatibility)
- [Scenario 1:](#scenario-1)
- [Identity features enabled](#identity-features-enabled)
- [Scenario 2:](#scenario-2)
- [Scenario 3:](#scenario-3)
- [Using Admin account](#using-admin-account)
- [Initial Cluster configuration](#initial-cluster-configuration)
- [Scenario 4:](#scenario-4)
- [Scenario 5:](#scenario-5)
- [Password changes](#password-changes)
Expand All @@ -19,13 +20,13 @@
- [Multi-node Cluster](#multi-node-cluster)
- [Scenario XXX:](#scenario-xxx)

## Non-use compatibility
## Backwards compatibility

Given: Start an OpenSearch cluster with Identity experiment enabled and not configured

### Scenario 1:

The cluster runs with the Security plugin. No Security plugin scenarios are impacted.
The cluster runs with the Security plugin. No Security plugin scenarios are impacted. No additional API calls or configuration need to be updated.

*Technical*: Identity uses the NoopAuthenticationManager

Expand All @@ -41,7 +42,7 @@ By reading the opensearch.log / console output a random admin password is shown.

All REST API activity returns 403 without passing authentication information in the request

## Using Admin account
## Initial Cluster configuration

Given: The admin password is known

Expand All @@ -54,6 +55,7 @@ Using http basic auth it is possible to make any REST API request, no errors rel
Admin makes a request to `PUT /identity/user/admin/password` with a json body `{ password: "value" }`, it succeeds

*Technical*: Need user actions
*Technical*: API path should be discussed, `user` implies this only applies to interactive user sessions, how will plugins/extensions be addressed.

## Password changes

Expand Down

0 comments on commit afe7fb9

Please sign in to comment.