Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update csp configuration instructions for OSD #7026

Merged
merged 23 commits into from
May 1, 2024

Conversation

tianleh
Copy link
Member

@tianleh tianleh commented Apr 25, 2024

Description

We made some changes to the feature of configuring CSP rules. Previously it was able to modify the whole CSP rule in 2.13.0. Now it is limited to only modify one directive frame-ancestors in CSP rules.

Issues Resolved

Closes #7024

Checklist

  • By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license and subject to the Developers Certificate of Origin.
    For more information on following Developer Certificate of Origin and signing off your commits, please check here.

@hdhalter
Copy link
Contributor

Thanks so much, @tianleh! Can you please fix the vale errors? You can ignore the README errors (@natebower - is this something we should add to the vale script?). Let me know when it's ready for a doc review. Thx.

@tianleh tianleh force-pushed the update-csp branch 2 times, most recently from 1e47c37 to 1a3170e Compare April 25, 2024 20:49
@tianleh
Copy link
Member Author

tianleh commented Apr 25, 2024

Thanks so much, @tianleh! Can you please fix the vale errors? You can ignore the README errors (@natebower - is this something we should add to the vale script?). Let me know when it's ready for a doc review. Thx.

fixed the vale errors. Please take a look again.

@tianleh
Copy link
Member Author

tianleh commented Apr 25, 2024

@hdhalter

@hdhalter hdhalter added the 4 - Doc review PR: Doc review in progress label Apr 25, 2024
@natebower
Copy link
Collaborator

Thanks so much, @tianleh! Can you please fix the vale errors? You can ignore the README errors (@natebower - is this something we should add to the vale script?). Let me know when it's ready for a doc review. Thx.

I'm uncertain to what errors we're referring.

@tianleh
Copy link
Member Author

tianleh commented Apr 26, 2024

Thanks so much, @tianleh! Can you please fix the vale errors? You can ignore the README errors (@natebower - is this something we should add to the vale script?). Let me know when it's ready for a doc review. Thx.

I'm uncertain to what errors we're referring.

The vale check is treating the word README as acronym and complains about it. I already fixed it.

@vagimeli vagimeli self-assigned this Apr 29, 2024
Copy link
Contributor

@vagimeli vagimeli left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Doc review complete. Please see the edits. I'll move this to editorial review once author approves changes.

_dashboards/csp/csp-dynamic-configuration.md Outdated Show resolved Hide resolved
_dashboards/csp/csp-dynamic-configuration.md Outdated Show resolved Hide resolved
_dashboards/csp/csp-dynamic-configuration.md Outdated Show resolved Hide resolved
_dashboards/csp/csp-dynamic-configuration.md Outdated Show resolved Hide resolved
_dashboards/csp/csp-dynamic-configuration.md Outdated Show resolved Hide resolved
tianleh and others added 8 commits April 29, 2024 16:00
Signed-off-by: Tianle Huang <[email protected]>
Signed-off-by: Tianle Huang <[email protected]>
Signed-off-by: Tianle Huang <[email protected]>
Signed-off-by: Tianle Huang <[email protected]>
Co-authored-by: Melissa Vagi <[email protected]>
Signed-off-by: Tianle Huang <[email protected]>
Co-authored-by: Melissa Vagi <[email protected]>
Signed-off-by: Tianle Huang <[email protected]>
Co-authored-by: Melissa Vagi <[email protected]>
Signed-off-by: Tianle Huang <[email protected]>
tianleh and others added 2 commits April 29, 2024 16:00
Co-authored-by: Melissa Vagi <[email protected]>
Signed-off-by: Tianle Huang <[email protected]>
Co-authored-by: Melissa Vagi <[email protected]>
Signed-off-by: Tianle Huang <[email protected]>
Signed-off-by: Melissa Vagi <[email protected]>

Signed-off-by: Melissa Vagi <[email protected]>
@vagimeli vagimeli added 5 - Editorial review PR: Editorial review in progress and removed 4 - Doc review PR: Doc review in progress labels Apr 30, 2024
Copy link
Collaborator

@natebower natebower left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@tianleh @vagimeli Please see my comments and changes and let me know if you have any questions. Thanks!

_dashboards/csp/csp-dynamic-configuration.md Outdated Show resolved Hide resolved
_dashboards/csp/csp-dynamic-configuration.md Outdated Show resolved Hide resolved

## Configuration

The `applicationConfig` plugin provides read and write APIs that allow OpenSearch Dashboards users to manage dynamic configurations as key-value pairs in an index. The `cspHandler` plugin registers a pre-response handler to `HttpServiceSetup`, which gets CSP rules from the dependent `applicationConfig` plugin and then rewrites to the CSP header. Enable both plugins within your `opensearch_dashboards.yml` file to use this feature. The configuration is shown in the following example. Refer to the `cspHandler` plugin [README](https://github.com/opensearch-project/OpenSearch-Dashboards/blob/main/src/plugins/csp_handler/README.md) for configuration details.
The `applicationConfig` plugin provides read and write APIs that allow OpenSearch Dashboards users to manage dynamic configurations as key-value pairs in an index. The `cspHandler` plugin registers a pre-response handler to `HttpServiceSetup`, which gets the `frame-ancestors` value from the dependent `applicationConfig` plugin and then rewrites to the CSP header. Enable both plugins within your `opensearch_dashboards.yml` file to use this feature. The configuration is shown in the following example. Refer to [`cspHandler` plugin](https://github.com/opensearch-project/OpenSearch-Dashboards/blob/main/src/plugins/csp_handler/README.md) for configuration details.
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Should "it" follow "rewrites"?

_dashboards/csp/csp-dynamic-configuration.md Outdated Show resolved Hide resolved
_dashboards/csp/csp-dynamic-configuration.md Outdated Show resolved Hide resolved
_dashboards/csp/csp-dynamic-configuration.md Outdated Show resolved Hide resolved
_dashboards/csp/csp-dynamic-configuration.md Outdated Show resolved Hide resolved
_dashboards/csp/csp-dynamic-configuration.md Outdated Show resolved Hide resolved
_dashboards/csp/csp-dynamic-configuration.md Outdated Show resolved Hide resolved
_dashboards/csp/csp-dynamic-configuration.md Outdated Show resolved Hide resolved
tianleh and others added 11 commits May 1, 2024 11:49
Co-authored-by: Nathan Bower <[email protected]>
Signed-off-by: Tianle Huang <[email protected]>
Co-authored-by: Nathan Bower <[email protected]>
Signed-off-by: Tianle Huang <[email protected]>
Co-authored-by: Nathan Bower <[email protected]>
Signed-off-by: Tianle Huang <[email protected]>
Co-authored-by: Nathan Bower <[email protected]>
Signed-off-by: Tianle Huang <[email protected]>
Co-authored-by: Nathan Bower <[email protected]>
Signed-off-by: Tianle Huang <[email protected]>
Co-authored-by: Nathan Bower <[email protected]>
Signed-off-by: Tianle Huang <[email protected]>
Co-authored-by: Nathan Bower <[email protected]>
Signed-off-by: Tianle Huang <[email protected]>
Co-authored-by: Nathan Bower <[email protected]>
Signed-off-by: Tianle Huang <[email protected]>
Co-authored-by: Nathan Bower <[email protected]>
Signed-off-by: Tianle Huang <[email protected]>
Co-authored-by: Nathan Bower <[email protected]>
Signed-off-by: Melissa Vagi <[email protected]>
@vagimeli vagimeli merged commit 2c960ac into opensearch-project:main May 1, 2024
5 checks passed
@hdhalter hdhalter added release-notes PR: Include this PR in the automated release notes 3 - Done Issue is done/complete and removed 5 - Editorial review PR: Editorial review in progress labels May 1, 2024
sgup432 pushed a commit to sgup432/documentation-website that referenced this pull request May 8, 2024
* Update docs about configuring frame-ancestors

Signed-off-by: Tianle Huang <[email protected]>

* update fgac info

Signed-off-by: Tianle Huang <[email protected]>

* add fgac info

Signed-off-by: Tianle Huang <[email protected]>

* fix vale

Signed-off-by: Tianle Huang <[email protected]>

* fix readme

Signed-off-by: Tianle Huang <[email protected]>

* Update _dashboards/csp/csp-dynamic-configuration.md

Co-authored-by: Melissa Vagi <[email protected]>
Signed-off-by: Tianle Huang <[email protected]>

* Update _dashboards/csp/csp-dynamic-configuration.md

Co-authored-by: Melissa Vagi <[email protected]>
Signed-off-by: Tianle Huang <[email protected]>

* Update _dashboards/csp/csp-dynamic-configuration.md

Co-authored-by: Melissa Vagi <[email protected]>
Signed-off-by: Tianle Huang <[email protected]>

* Update _dashboards/csp/csp-dynamic-configuration.md

Co-authored-by: Melissa Vagi <[email protected]>
Signed-off-by: Tianle Huang <[email protected]>

* Update _dashboards/csp/csp-dynamic-configuration.md

Co-authored-by: Melissa Vagi <[email protected]>
Signed-off-by: Tianle Huang <[email protected]>

* Update csp-dynamic-configuration.md

Signed-off-by: Melissa Vagi <[email protected]>

Signed-off-by: Melissa Vagi <[email protected]>

* Update _dashboards/csp/csp-dynamic-configuration.md

Co-authored-by: Nathan Bower <[email protected]>
Signed-off-by: Tianle Huang <[email protected]>

* Update _dashboards/csp/csp-dynamic-configuration.md

Co-authored-by: Nathan Bower <[email protected]>
Signed-off-by: Tianle Huang <[email protected]>

* Update _dashboards/csp/csp-dynamic-configuration.md

Co-authored-by: Nathan Bower <[email protected]>
Signed-off-by: Tianle Huang <[email protected]>

* Update _dashboards/csp/csp-dynamic-configuration.md

Co-authored-by: Nathan Bower <[email protected]>
Signed-off-by: Tianle Huang <[email protected]>

* Update _dashboards/csp/csp-dynamic-configuration.md

Co-authored-by: Nathan Bower <[email protected]>
Signed-off-by: Tianle Huang <[email protected]>

* Update _dashboards/csp/csp-dynamic-configuration.md

Co-authored-by: Nathan Bower <[email protected]>
Signed-off-by: Tianle Huang <[email protected]>

* Update _dashboards/csp/csp-dynamic-configuration.md

Co-authored-by: Nathan Bower <[email protected]>
Signed-off-by: Tianle Huang <[email protected]>

* Update _dashboards/csp/csp-dynamic-configuration.md

Co-authored-by: Nathan Bower <[email protected]>
Signed-off-by: Tianle Huang <[email protected]>

* Update _dashboards/csp/csp-dynamic-configuration.md

Co-authored-by: Nathan Bower <[email protected]>
Signed-off-by: Tianle Huang <[email protected]>

* Update _dashboards/csp/csp-dynamic-configuration.md

Co-authored-by: Nathan Bower <[email protected]>
Signed-off-by: Melissa Vagi <[email protected]>

* Update _dashboards/csp/csp-dynamic-configuration.md

Signed-off-by: Melissa Vagi <[email protected]>

---------

Signed-off-by: Tianle Huang <[email protected]>
Signed-off-by: Tianle Huang <[email protected]>
Signed-off-by: Melissa Vagi <[email protected]>
Co-authored-by: Melissa Vagi <[email protected]>
Co-authored-by: Nathan Bower <[email protected]>
Signed-off-by: Sagar Upadhyaya <[email protected]>
Naarcha-AWS added a commit that referenced this pull request May 8, 2024
* Add cache plugin and tiered cache documentation

Signed-off-by: Sagar Upadhyaya <[email protected]>

* Apply suggestions from code review

Signed-off-by: Naarcha-AWS <[email protected]>
Signed-off-by: Sagar Upadhyaya <[email protected]>

* Apply suggestions from code review

Signed-off-by: Naarcha-AWS <[email protected]>
Signed-off-by: Sagar Upadhyaya <[email protected]>

* Update index.md

Signed-off-by: Sagar Upadhyaya <[email protected]>

* Update concepts.md (#7049)

Signed-off-by: Naarcha-AWS <[email protected]>
Signed-off-by: Sagar Upadhyaya <[email protected]>

* Update alert-finding-api.md (#7036)

Signed-off-by: Heather Halter <[email protected]>
Signed-off-by: Sagar Upadhyaya <[email protected]>

* [DOC] Add urldecode processor documentation (#5994)

* Add urldecode processor documentation

Signed-off-by: Melissa Vagi <[email protected]>

* Add text and examples

Signed-off-by: Melissa Vagi <[email protected]>

* Update urldecode.md

Signed-off-by: Melissa Vagi <[email protected]>

Signed-off-by: Melissa Vagi <[email protected]>

* Update _ingest-pipelines/processors/urldecode.md

Co-authored-by: Nathan Bower <[email protected]>
Signed-off-by: Melissa Vagi <[email protected]>

* Update _ingest-pipelines/processors/urldecode.md

Co-authored-by: Nathan Bower <[email protected]>
Signed-off-by: Melissa Vagi <[email protected]>

* Update _ingest-pipelines/processors/urldecode.md

Co-authored-by: Nathan Bower <[email protected]>
Signed-off-by: Melissa Vagi <[email protected]>

* Update _ingest-pipelines/processors/urldecode.md

Co-authored-by: Nathan Bower <[email protected]>
Signed-off-by: Melissa Vagi <[email protected]>

* Update _ingest-pipelines/processors/urldecode.md

Co-authored-by: Nathan Bower <[email protected]>
Signed-off-by: Melissa Vagi <[email protected]>

* Update urldecode.md

Signed-off-by: Melissa Vagi <[email protected]>

Signed-off-by: Melissa Vagi <[email protected]>

---------

Signed-off-by: Melissa Vagi <[email protected]>
Co-authored-by: Nathan Bower <[email protected]>
Signed-off-by: Sagar Upadhyaya <[email protected]>

* clarify "contexts" (#7063)

Signed-off-by: Stavros Macrakis <[email protected]>
Signed-off-by: Sagar Upadhyaya <[email protected]>

* Add documentation for indices.replication.max_bytes_per_sec (#7048)

* Add documentation for indices.replication.max_bytes_per_sec

Signed-off-by: Marc Handalian <[email protected]>

* Update _install-and-configure/configuring-opensearch/index-settings.md

Signed-off-by: Naarcha-AWS <[email protected]>

* Apply suggestions from code review

Signed-off-by: Naarcha-AWS <[email protected]>

---------

Signed-off-by: Marc Handalian <[email protected]>
Signed-off-by: Naarcha-AWS <[email protected]>
Co-authored-by: Naarcha-AWS <[email protected]>
Signed-off-by: Sagar Upadhyaya <[email protected]>

* Update concurrent search docs with composite aggs updates (#7043)

Signed-off-by: Jay Deng <[email protected]>
Signed-off-by: Sagar Upadhyaya <[email protected]>

* add query_by_tokens option in Neural Sparse Search (#7040)

* query tokens

Signed-off-by: zhichao-aws <[email protected]>

* fix typo

Signed-off-by: zhichao-aws <[email protected]>

* typo

Signed-off-by: zhichao-aws <[email protected]>

* fix

Signed-off-by: zhichao-aws <[email protected]>

* Update _query-dsl/specialized/neural-sparse.md

Co-authored-by: Naarcha-AWS <[email protected]>
Signed-off-by: zhichao-aws <[email protected]>

* Update _query-dsl/specialized/neural-sparse.md

Co-authored-by: Naarcha-AWS <[email protected]>
Signed-off-by: zhichao-aws <[email protected]>

* Update _query-dsl/specialized/neural-sparse.md

Co-authored-by: Naarcha-AWS <[email protected]>
Signed-off-by: zhichao-aws <[email protected]>

* Update _query-dsl/specialized/neural-sparse.md

Co-authored-by: Naarcha-AWS <[email protected]>
Signed-off-by: zhichao-aws <[email protected]>

* Update _query-dsl/specialized/neural-sparse.md

Co-authored-by: Naarcha-AWS <[email protected]>
Signed-off-by: zhichao-aws <[email protected]>

* Update _search-plugins/neural-sparse-search.md

Co-authored-by: Naarcha-AWS <[email protected]>
Signed-off-by: zhichao-aws <[email protected]>

* Update _search-plugins/neural-sparse-search.md

Co-authored-by: Naarcha-AWS <[email protected]>
Signed-off-by: zhichao-aws <[email protected]>

* Apply suggestions from code review

Co-authored-by: Nathan Bower <[email protected]>
Signed-off-by: Naarcha-AWS <[email protected]>

---------

Signed-off-by: zhichao-aws <[email protected]>
Signed-off-by: Naarcha-AWS <[email protected]>
Co-authored-by: Naarcha-AWS <[email protected]>
Co-authored-by: Nathan Bower <[email protected]>
Signed-off-by: Sagar Upadhyaya <[email protected]>

* Update bundled JDK version (April 2024 Patch releases) (#7031)

Signed-off-by: Andriy Redko <[email protected]>
Signed-off-by: Sagar Upadhyaya <[email protected]>

* Updating documentation for ignore_unavailable search request parameter (#6987)

* Updating documentation for ignore_unavailable search request parameter

Signed-off-by: Ankit Jain <[email protected]>

* Update _api-reference/search.md

Co-authored-by: Naarcha-AWS <[email protected]>
Signed-off-by: Ankit Jain <[email protected]>

* Update _api-reference/document-apis/delete-by-query.md

Co-authored-by: Naarcha-AWS <[email protected]>
Signed-off-by: Ankit Jain <[email protected]>

* Update _api-reference/document-apis/update-by-query.md

Co-authored-by: Naarcha-AWS <[email protected]>
Signed-off-by: Ankit Jain <[email protected]>

---------

Signed-off-by: Ankit Jain <[email protected]>
Co-authored-by: Naarcha-AWS <[email protected]>
Signed-off-by: Sagar Upadhyaya <[email protected]>

* Add documentation for hardware-accelerated compression codecs. (#6841)

* Add documentation for hardware-accelerated compression codecs.

Signed-off-by: Mulugeta Mammo <[email protected]>

* Fix based on the review from reviewdog.

Signed-off-by: Mulugeta Mammo <[email protected]>

* Use the registered symbol for Intel and Xeon.

Signed-off-by: mulugetam <[email protected]>

* Minor modifications to the text.

Signed-off-by: mulugetam <[email protected]>

* Rephrasing.

Signed-off-by: mulugetam <[email protected]>

* Paraphrasing.

Signed-off-by: mulugetam <[email protected]>

* Apply suggestions from code review

Signed-off-by: Naarcha-AWS <[email protected]>

* Update _im-plugin/index-codecs.md

Signed-off-by: Naarcha-AWS <[email protected]>

* Update _install-and-configure/configuring-opensearch/index-settings.md

Signed-off-by: Naarcha-AWS <[email protected]>

* Apply suggestions from code review

Co-authored-by: Nathan Bower <[email protected]>
Signed-off-by: Naarcha-AWS <[email protected]>

---------

Signed-off-by: Mulugeta Mammo <[email protected]>
Signed-off-by: mulugetam <[email protected]>
Signed-off-by: Naarcha-AWS <[email protected]>
Co-authored-by: Naarcha-AWS <[email protected]>
Co-authored-by: Nathan Bower <[email protected]>
Signed-off-by: Sagar Upadhyaya <[email protected]>

* Correct the release version for the upgrade API feature (#6955)

Signed-off-by: Peter Nied <[email protected]>
Signed-off-by: Sagar Upadhyaya <[email protected]>

* [DOC] Add user agent processor documentation (#5995)

* Add user agent processor documentation

Signed-off-by: Melissa Vagi <[email protected]>

* Add user agent processor documentation

Signed-off-by: Melissa Vagi <[email protected]>

* Add examples

Signed-off-by: Melissa Vagi <[email protected]>

* Add user agent processor documentation

Signed-off-by: Melissa Vagi <[email protected]>

* Add user agent processor documentation

Signed-off-by: Melissa Vagi <[email protected]>

* Add examples

Signed-off-by: Melissa Vagi <[email protected]>

* Add examples and text

Signed-off-by: Melissa Vagi <[email protected]>

* Update user-agent.md

Signed-off-by: Melissa Vagi <[email protected]>

Signed-off-by: Melissa Vagi <[email protected]>

* Update user-agent.md

Signed-off-by: Melissa Vagi <[email protected]>

Signed-off-by: Melissa Vagi <[email protected]>

* Update _ingest-pipelines/processors/user-agent.md

Co-authored-by: Nathan Bower <[email protected]>
Signed-off-by: Melissa Vagi <[email protected]>

* Update _ingest-pipelines/processors/user-agent.md

Co-authored-by: Nathan Bower <[email protected]>
Signed-off-by: Melissa Vagi <[email protected]>

* Update _ingest-pipelines/processors/user-agent.md

Co-authored-by: Nathan Bower <[email protected]>
Signed-off-by: Melissa Vagi <[email protected]>

* Update _ingest-pipelines/processors/user-agent.md

Co-authored-by: Nathan Bower <[email protected]>
Signed-off-by: Melissa Vagi <[email protected]>

* Update _ingest-pipelines/processors/user-agent.md

Co-authored-by: Nathan Bower <[email protected]>
Signed-off-by: Melissa Vagi <[email protected]>

* Update _ingest-pipelines/processors/user-agent.md

Co-authored-by: Nathan Bower <[email protected]>
Signed-off-by: Melissa Vagi <[email protected]>

* Update user-agent.md

Signed-off-by: Melissa Vagi <[email protected]>

Signed-off-by: Melissa Vagi <[email protected]>

---------

Signed-off-by: Melissa Vagi <[email protected]>
Co-authored-by: Nathan Bower <[email protected]>
Signed-off-by: Sagar Upadhyaya <[email protected]>

* Add understanding results page (#6984)

* Add refresh API.

Signed-off-by: Archer <[email protected]>

* Add Understanding Results section

Signed-off-by: Archer <[email protected]>

* Additional feedback.

Signed-off-by: Archer <[email protected]>

* Rework important metrics section.

Signed-off-by: Archer <[email protected]>

* Add summary report breakdown

Signed-off-by: Archer <[email protected]>

* Apply suggestions from code review

Signed-off-by: Naarcha-AWS <[email protected]>

* Apply suggestions from code review

Signed-off-by: Naarcha-AWS <[email protected]>

* Apply suggestions from code review

Signed-off-by: Naarcha-AWS <[email protected]>

* Delete _api-reference/index-apis/refresh.md

Signed-off-by: Naarcha-AWS <[email protected]>

* Update understanding-results.md

Signed-off-by: Naarcha-AWS <[email protected]>

* Apply suggestions from code review

Signed-off-by: Naarcha-AWS <[email protected]>

* Apply suggestions from code review

Signed-off-by: Naarcha-AWS <[email protected]>

* Apply suggestions from code review

Co-authored-by: Heather Halter <[email protected]>
Signed-off-by: Naarcha-AWS <[email protected]>

* Apply suggestions from code review

Signed-off-by: Naarcha-AWS <[email protected]>

* Apply suggestions from code review

Signed-off-by: Naarcha-AWS <[email protected]>

* Apply suggestions from code review

Signed-off-by: Naarcha-AWS <[email protected]>

* Apply suggestions from code review

Co-authored-by: Nathan Bower <[email protected]>
Signed-off-by: Naarcha-AWS <[email protected]>

---------

Signed-off-by: Archer <[email protected]>
Signed-off-by: Naarcha-AWS <[email protected]>
Co-authored-by: Heather Halter <[email protected]>
Co-authored-by: Nathan Bower <[email protected]>
Signed-off-by: Sagar Upadhyaya <[email protected]>

* Add cluster setting for filter rewrite optimization in aggregation (#7033)

* Add cluster setting for filter rewrite optimization in aggregation

Signed-off-by: bowenlan-amzn <[email protected]>

* Update search-settings.md

Signed-off-by: Melissa Vagi <[email protected]>

---------

Signed-off-by: bowenlan-amzn <[email protected]>
Signed-off-by: Melissa Vagi <[email protected]>
Co-authored-by: Melissa Vagi <[email protected]>
Signed-off-by: Sagar Upadhyaya <[email protected]>

* remove-has-childreren (#7072)

Signed-off-by: Heather Halter <[email protected]>
Signed-off-by: Sagar Upadhyaya <[email protected]>

* Update csp configuration instructions for OSD (#7026)

* Update docs about configuring frame-ancestors

Signed-off-by: Tianle Huang <[email protected]>

* update fgac info

Signed-off-by: Tianle Huang <[email protected]>

* add fgac info

Signed-off-by: Tianle Huang <[email protected]>

* fix vale

Signed-off-by: Tianle Huang <[email protected]>

* fix readme

Signed-off-by: Tianle Huang <[email protected]>

* Update _dashboards/csp/csp-dynamic-configuration.md

Co-authored-by: Melissa Vagi <[email protected]>
Signed-off-by: Tianle Huang <[email protected]>

* Update _dashboards/csp/csp-dynamic-configuration.md

Co-authored-by: Melissa Vagi <[email protected]>
Signed-off-by: Tianle Huang <[email protected]>

* Update _dashboards/csp/csp-dynamic-configuration.md

Co-authored-by: Melissa Vagi <[email protected]>
Signed-off-by: Tianle Huang <[email protected]>

* Update _dashboards/csp/csp-dynamic-configuration.md

Co-authored-by: Melissa Vagi <[email protected]>
Signed-off-by: Tianle Huang <[email protected]>

* Update _dashboards/csp/csp-dynamic-configuration.md

Co-authored-by: Melissa Vagi <[email protected]>
Signed-off-by: Tianle Huang <[email protected]>

* Update csp-dynamic-configuration.md

Signed-off-by: Melissa Vagi <[email protected]>

Signed-off-by: Melissa Vagi <[email protected]>

* Update _dashboards/csp/csp-dynamic-configuration.md

Co-authored-by: Nathan Bower <[email protected]>
Signed-off-by: Tianle Huang <[email protected]>

* Update _dashboards/csp/csp-dynamic-configuration.md

Co-authored-by: Nathan Bower <[email protected]>
Signed-off-by: Tianle Huang <[email protected]>

* Update _dashboards/csp/csp-dynamic-configuration.md

Co-authored-by: Nathan Bower <[email protected]>
Signed-off-by: Tianle Huang <[email protected]>

* Update _dashboards/csp/csp-dynamic-configuration.md

Co-authored-by: Nathan Bower <[email protected]>
Signed-off-by: Tianle Huang <[email protected]>

* Update _dashboards/csp/csp-dynamic-configuration.md

Co-authored-by: Nathan Bower <[email protected]>
Signed-off-by: Tianle Huang <[email protected]>

* Update _dashboards/csp/csp-dynamic-configuration.md

Co-authored-by: Nathan Bower <[email protected]>
Signed-off-by: Tianle Huang <[email protected]>

* Update _dashboards/csp/csp-dynamic-configuration.md

Co-authored-by: Nathan Bower <[email protected]>
Signed-off-by: Tianle Huang <[email protected]>

* Update _dashboards/csp/csp-dynamic-configuration.md

Co-authored-by: Nathan Bower <[email protected]>
Signed-off-by: Tianle Huang <[email protected]>

* Update _dashboards/csp/csp-dynamic-configuration.md

Co-authored-by: Nathan Bower <[email protected]>
Signed-off-by: Tianle Huang <[email protected]>

* Update _dashboards/csp/csp-dynamic-configuration.md

Co-authored-by: Nathan Bower <[email protected]>
Signed-off-by: Melissa Vagi <[email protected]>

* Update _dashboards/csp/csp-dynamic-configuration.md

Signed-off-by: Melissa Vagi <[email protected]>

---------

Signed-off-by: Tianle Huang <[email protected]>
Signed-off-by: Tianle Huang <[email protected]>
Signed-off-by: Melissa Vagi <[email protected]>
Co-authored-by: Melissa Vagi <[email protected]>
Co-authored-by: Nathan Bower <[email protected]>
Signed-off-by: Sagar Upadhyaya <[email protected]>

* adding do_not_fail_on_forbidden section to docs #4896 (#6958)

* adding do_not_fail_on_forbidden section to docs #4896

Signed-off-by: AntonEliatra <[email protected]>

* Update _security/access-control/permissions.md

Co-authored-by: Stephen Crawford <[email protected]>
Signed-off-by: Melissa Vagi <[email protected]>

* Update _security/access-control/permissions.md

Co-authored-by: Stephen Crawford <[email protected]>
Signed-off-by: Melissa Vagi <[email protected]>

* Update _security/access-control/permissions.md

Co-authored-by: Stephen Crawford <[email protected]>
Signed-off-by: Melissa Vagi <[email protected]>

* Update permissions.md

Signed-off-by: Melissa Vagi <[email protected]>

Signed-off-by: Melissa Vagi <[email protected]>

* Update _security/access-control/permissions.md

Signed-off-by: Melissa Vagi <[email protected]>

* Update permissions.md

Signed-off-by: Melissa Vagi <[email protected]>

Signed-off-by: Melissa Vagi <[email protected]>

* Update permissions.md

Signed-off-by: Melissa Vagi <[email protected]>

Signed-off-by: Melissa Vagi <[email protected]>

* Update _security/access-control/permissions.md

Co-authored-by: Nathan Bower <[email protected]>
Signed-off-by: Melissa Vagi <[email protected]>

* Update _security/access-control/permissions.md

Co-authored-by: Nathan Bower <[email protected]>
Signed-off-by: Melissa Vagi <[email protected]>

* Update _security/access-control/permissions.md

Co-authored-by: Nathan Bower <[email protected]>
Signed-off-by: Melissa Vagi <[email protected]>

* Update _security/access-control/permissions.md

Co-authored-by: Nathan Bower <[email protected]>
Signed-off-by: Melissa Vagi <[email protected]>

* Update _security/access-control/permissions.md

Co-authored-by: Nathan Bower <[email protected]>
Signed-off-by: Melissa Vagi <[email protected]>

* Update _security/access-control/permissions.md

Signed-off-by: Melissa Vagi <[email protected]>

---------

Signed-off-by: AntonEliatra <[email protected]>
Signed-off-by: Melissa Vagi <[email protected]>
Co-authored-by: Melissa Vagi <[email protected]>
Co-authored-by: Stephen Crawford <[email protected]>
Co-authored-by: Nathan Bower <[email protected]>
Signed-off-by: Sagar Upadhyaya <[email protected]>

* feat: fix overlap rate param (#7045)

Signed-off-by: Ian Menendez <[email protected]>
Signed-off-by: Sagar Upadhyaya <[email protected]>

* adding kibana_server role specification and explanation #4094 (#7066)

* adding kibana_user role specification and explanation #4094

Signed-off-by: AntonEliatra <[email protected]>

* Apply suggestions from code review

Co-authored-by: Melissa Vagi <[email protected]>
Co-authored-by: Nathan Bower <[email protected]>
Signed-off-by: AntonEliatra <[email protected]>

* Update multi-tenancy-config.md

Signed-off-by: AntonEliatra <[email protected]>

* Apply suggestions from code review

Co-authored-by: Melissa Vagi <[email protected]>
Signed-off-by: AntonEliatra <[email protected]>

* Update multi-tenancy-config.md

Signed-off-by: AntonEliatra <[email protected]>

---------

Signed-off-by: AntonEliatra <[email protected]>
Co-authored-by: Melissa Vagi <[email protected]>
Co-authored-by: Nathan Bower <[email protected]>
Signed-off-by: Sagar Upadhyaya <[email protected]>

* expanding on TrustStore and KeyStore #4578 #4060 (#7015)

* expanding on TrustStore and KeyStore #4578 #4060

Signed-off-by: AntonEliatra <[email protected]>

* expanding on TrustStore and KeyStore #4578 #4060

Signed-off-by: AntonEliatra <[email protected]>

* Update generate-certificates.md

Signed-off-by: AntonEliatra <[email protected]>

* Update opensearch-keystore.md

Signed-off-by: AntonEliatra <[email protected]>

* Apply suggestions from code review

Co-authored-by: Stephen Crawford <[email protected]>
Signed-off-by: AntonEliatra <[email protected]>

* Update security-admin.md

Signed-off-by: AntonEliatra <[email protected]>

* Apply suggestions from code review

Co-authored-by: Melissa Vagi <[email protected]>
Signed-off-by: AntonEliatra <[email protected]>

* Apply suggestions from code review

Co-authored-by: Melissa Vagi <[email protected]>
Signed-off-by: AntonEliatra <[email protected]>

* Apply suggestions from code review

Co-authored-by: Nathan Bower <[email protected]>
Signed-off-by: AntonEliatra <[email protected]>

---------

Signed-off-by: AntonEliatra <[email protected]>
Co-authored-by: Stephen Crawford <[email protected]>
Co-authored-by: Melissa Vagi <[email protected]>
Co-authored-by: Nathan Bower <[email protected]>
Signed-off-by: Sagar Upadhyaya <[email protected]>

* Add documentation for primary rebalancing (#7059)

* Add documentation for primary rebalacing

Signed-off-by: Arpit Bandejiya <[email protected]>

* Update _install-and-configure/configuring-opensearch/cluster-settings.md

Signed-off-by: Naarcha-AWS <[email protected]>

* Apply suggestions from code review

Co-authored-by: Nathan Bower <[email protected]>
Signed-off-by: Naarcha-AWS <[email protected]>

---------

Signed-off-by: Arpit Bandejiya <[email protected]>
Signed-off-by: Naarcha-AWS <[email protected]>
Co-authored-by: Naarcha-AWS <[email protected]>
Co-authored-by: Nathan Bower <[email protected]>
Signed-off-by: Sagar Upadhyaya <[email protected]>

* Update stats.md (#7087)

Signed-off-by: Naarcha-AWS <[email protected]>
Signed-off-by: Sagar Upadhyaya <[email protected]>

* navbar yml update.  (#7091)

* Omitting the named anchor from header Download link.

Signed-off-by: Nathan Boot <[email protected]>

* Updates navbar yml.

---------

Signed-off-by: Nathan Boot <[email protected]>
Co-authored-by: Heather Halter <[email protected]>
Signed-off-by: Sagar Upadhyaya <[email protected]>

* Missed a few includes that are referred to by the navbar. (#7093)

* Omitting the named anchor from header Download link.

Signed-off-by: Nathan Boot <[email protected]>

* Updates navbar yml.

* Navbar sass and html includes required for navbar.

---------

Signed-off-by: Nathan Boot <[email protected]>
Co-authored-by: Heather Halter <[email protected]>
Signed-off-by: Sagar Upadhyaya <[email protected]>

* Add missing OPENSEARCH_INITIAL_ADMIN_PASSWORD for both apt/deb and yum/rpm (#7079)

* Add missing OPENSEARCH_INITIAL_ADMIN_PASSWORD  for apt install on debian.md

This page's install command when installing via rep package is missing `OPENSEARCH_INITIAL_ADMIN_PASSWORD`

Signed-off-by: Drew Miranda <[email protected]>

* More update on deb and rpm installation steps on 2.12 security changes

Signed-off-by: Peter Zhu <[email protected]>

* Move 2.12 top

Signed-off-by: Peter Zhu <[email protected]>

* fix formatting

Signed-off-by: Peter Zhu <[email protected]>

* More tweaks

Signed-off-by: Peter Zhu <[email protected]>

* More tweaks 2

Signed-off-by: Peter Zhu <[email protected]>

* Update _install-and-configure/install-opensearch/debian.md

Signed-off-by: Peter Zhu <[email protected]>

Co-authored-by: Nathan Bower <[email protected]>
Signed-off-by: Peter Zhu <[email protected]>

* Update _install-and-configure/install-opensearch/debian.md

Signed-off-by: Peter Zhu <[email protected]>

Co-authored-by: Nathan Bower <[email protected]>
Signed-off-by: Peter Zhu <[email protected]>

* Update _install-and-configure/install-opensearch/debian.md

Signed-off-by: Peter Zhu <[email protected]>

Co-authored-by: Nathan Bower <[email protected]>
Signed-off-by: Peter Zhu <[email protected]>

* Update _install-and-configure/install-opensearch/debian.md

Signed-off-by: Peter Zhu <[email protected]>

Co-authored-by: Nathan Bower <[email protected]>
Signed-off-by: Peter Zhu <[email protected]>

* Update _install-and-configure/install-opensearch/debian.md

Signed-off-by: Peter Zhu <[email protected]>

Co-authored-by: Nathan Bower <[email protected]>
Signed-off-by: Peter Zhu <[email protected]>

* Update _install-and-configure/install-opensearch/rpm.md

Signed-off-by: Peter Zhu <[email protected]>

Co-authored-by: Nathan Bower <[email protected]>
Signed-off-by: Peter Zhu <[email protected]>

* Update _install-and-configure/install-opensearch/rpm.md

Signed-off-by: Peter Zhu <[email protected]>

Co-authored-by: Nathan Bower <[email protected]>
Signed-off-by: Peter Zhu <[email protected]>

* Update _install-and-configure/install-opensearch/rpm.md

Signed-off-by: Peter Zhu <[email protected]>

Co-authored-by: Nathan Bower <[email protected]>
Signed-off-by: Peter Zhu <[email protected]>

* Update _install-and-configure/install-opensearch/rpm.md

Signed-off-by: Peter Zhu <[email protected]>

Co-authored-by: Nathan Bower <[email protected]>
Signed-off-by: Peter Zhu <[email protected]>

* Update _install-and-configure/install-opensearch/rpm.md

Signed-off-by: Peter Zhu <[email protected]>

Co-authored-by: Nathan Bower <[email protected]>
Signed-off-by: Peter Zhu <[email protected]>

* Update _install-and-configure/install-opensearch/rpm.md

Signed-off-by: Peter Zhu <[email protected]>

Co-authored-by: Nathan Bower <[email protected]>
Signed-off-by: Peter Zhu <[email protected]>

* Update _install-and-configure/install-opensearch/rpm.md

Signed-off-by: Peter Zhu <[email protected]>

Co-authored-by: Nathan Bower <[email protected]>
Signed-off-by: Peter Zhu <[email protected]>

* Add more things

Signed-off-by: Peter Zhu <[email protected]>

* Add more things

Signed-off-by: Peter Zhu <[email protected]>

* Update _install-and-configure/install-opensearch/debian.md

Signed-off-by: Peter Zhu <[email protected]>

Co-authored-by: Nathan Bower <[email protected]>
Signed-off-by: Peter Zhu <[email protected]>

---------

Signed-off-by: Drew Miranda <[email protected]>
Signed-off-by: Peter Zhu <[email protected]>
Co-authored-by: Peter Zhu <[email protected]>
Co-authored-by: Nathan Bower <[email protected]>
Signed-off-by: Sagar Upadhyaya <[email protected]>

* Update tiered-cache.md

Signed-off-by: Sagar Upadhyaya <[email protected]>

* Apply suggestions from code review

Signed-off-by: Naarcha-AWS <[email protected]>
Signed-off-by: Sagar Upadhyaya <[email protected]>

* Apply suggestions from code review

Signed-off-by: Naarcha-AWS <[email protected]>
Signed-off-by: Sagar Upadhyaya <[email protected]>

* Update _search-plugins/caching/index.md

Co-authored-by: Nathan Bower <[email protected]>
Signed-off-by: Sagar <[email protected]>
Signed-off-by: Sagar Upadhyaya <[email protected]>

* Update _search-plugins/caching/index.md

Co-authored-by: Nathan Bower <[email protected]>
Signed-off-by: Sagar <[email protected]>
Signed-off-by: Sagar Upadhyaya <[email protected]>

* Update _search-plugins/caching/index.md

Co-authored-by: Nathan Bower <[email protected]>
Signed-off-by: Sagar <[email protected]>
Signed-off-by: Sagar Upadhyaya <[email protected]>

* Update _search-plugins/caching/index.md

Co-authored-by: Nathan Bower <[email protected]>
Signed-off-by: Sagar <[email protected]>
Signed-off-by: Sagar Upadhyaya <[email protected]>

* Update _search-plugins/caching/index.md

Co-authored-by: Nathan Bower <[email protected]>
Signed-off-by: Sagar <[email protected]>
Signed-off-by: Sagar Upadhyaya <[email protected]>

* Update _search-plugins/caching/tiered-cache.md

Co-authored-by: Nathan Bower <[email protected]>
Signed-off-by: Sagar <[email protected]>
Signed-off-by: Sagar Upadhyaya <[email protected]>

* Update _search-plugins/caching/tiered-cache.md

Co-authored-by: Nathan Bower <[email protected]>
Signed-off-by: Sagar <[email protected]>
Signed-off-by: Sagar Upadhyaya <[email protected]>

* Update _search-plugins/caching/tiered-cache.md

Co-authored-by: Nathan Bower <[email protected]>
Signed-off-by: Sagar <[email protected]>
Signed-off-by: Sagar Upadhyaya <[email protected]>

* Update _search-plugins/caching/tiered-cache.md

Co-authored-by: Nathan Bower <[email protected]>
Signed-off-by: Sagar <[email protected]>
Signed-off-by: Sagar Upadhyaya <[email protected]>

* Update _search-plugins/caching/tiered-cache.md

Co-authored-by: Nathan Bower <[email protected]>
Signed-off-by: Sagar <[email protected]>
Signed-off-by: Sagar Upadhyaya <[email protected]>

* Update _search-plugins/caching/tiered-cache.md

Co-authored-by: Nathan Bower <[email protected]>
Signed-off-by: Sagar <[email protected]>
Signed-off-by: Sagar Upadhyaya <[email protected]>

* Update _search-plugins/caching/tiered-cache.md

Co-authored-by: Nathan Bower <[email protected]>
Signed-off-by: Sagar <[email protected]>
Signed-off-by: Sagar Upadhyaya <[email protected]>

* Update _search-plugins/caching/tiered-cache.md

Co-authored-by: Nathan Bower <[email protected]>
Signed-off-by: Sagar <[email protected]>
Signed-off-by: Sagar Upadhyaya <[email protected]>

* Update _search-plugins/caching/tiered-cache.md

Co-authored-by: Nathan Bower <[email protected]>
Signed-off-by: Sagar <[email protected]>
Signed-off-by: Sagar Upadhyaya <[email protected]>

* Update _search-plugins/caching/tiered-cache.md

Co-authored-by: Nathan Bower <[email protected]>
Signed-off-by: Sagar <[email protected]>
Signed-off-by: Sagar Upadhyaya <[email protected]>

* Addressing comments

Signed-off-by: Sagar Upadhyaya <[email protected]>

* Apply suggestions from code review

Signed-off-by: Naarcha-AWS <[email protected]>

---------

Signed-off-by: Sagar Upadhyaya <[email protected]>
Signed-off-by: Naarcha-AWS <[email protected]>
Signed-off-by: Heather Halter <[email protected]>
Signed-off-by: Melissa Vagi <[email protected]>
Signed-off-by: Stavros Macrakis <[email protected]>
Signed-off-by: Marc Handalian <[email protected]>
Signed-off-by: Jay Deng <[email protected]>
Signed-off-by: zhichao-aws <[email protected]>
Signed-off-by: Andriy Redko <[email protected]>
Signed-off-by: Ankit Jain <[email protected]>
Signed-off-by: Mulugeta Mammo <[email protected]>
Signed-off-by: mulugetam <[email protected]>
Signed-off-by: Peter Nied <[email protected]>
Signed-off-by: Archer <[email protected]>
Signed-off-by: bowenlan-amzn <[email protected]>
Signed-off-by: Heather Halter <[email protected]>
Signed-off-by: Tianle Huang <[email protected]>
Signed-off-by: Tianle Huang <[email protected]>
Signed-off-by: AntonEliatra <[email protected]>
Signed-off-by: Ian Menendez <[email protected]>
Signed-off-by: Arpit Bandejiya <[email protected]>
Signed-off-by: Nathan Boot <[email protected]>
Signed-off-by: Drew Miranda <[email protected]>
Signed-off-by: Peter Zhu <[email protected]>
Signed-off-by: Sagar <[email protected]>
Co-authored-by: Naarcha-AWS <[email protected]>
Co-authored-by: Heather Halter <[email protected]>
Co-authored-by: Melissa Vagi <[email protected]>
Co-authored-by: Nathan Bower <[email protected]>
Co-authored-by: Stavros Macrakis <[email protected]>
Co-authored-by: Marc Handalian <[email protected]>
Co-authored-by: Jay Deng <[email protected]>
Co-authored-by: zhichao-aws <[email protected]>
Co-authored-by: Andriy Redko <[email protected]>
Co-authored-by: Ankit Jain <[email protected]>
Co-authored-by: mulugetam <[email protected]>
Co-authored-by: Peter Nied <[email protected]>
Co-authored-by: bowenlan-amzn <[email protected]>
Co-authored-by: Tianle Huang <[email protected]>
Co-authored-by: AntonEliatra <[email protected]>
Co-authored-by: Stephen Crawford <[email protected]>
Co-authored-by: Ian Menendez <[email protected]>
Co-authored-by: Arpit-Bandejiya <[email protected]>
Co-authored-by: Nate B <[email protected]>
Co-authored-by: Drew Miranda <[email protected]>
Co-authored-by: Peter Zhu <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
3 - Done Issue is done/complete release-notes PR: Include this PR in the automated release notes v2.14.0
Projects
None yet
Development

Successfully merging this pull request may close these issues.

[DOC] Update dynamic CSP rule configuration to only allow frame-ancestors
4 participants