-
Notifications
You must be signed in to change notification settings - Fork 291
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Remove deprecated route and endpoint #5066
base: main
Are you sure you want to change the base?
Remove deprecated route and endpoint #5066
Conversation
9ee8334
to
6d4cfb1
Compare
@willyborankin To fully complete removing Something similar to opensearch-project/security-dashboards-plugin#895 which was reverted due to not having a backend PR merged in simultaneously. There were 2 backend PRs after the break: |
Kindly check - #5031 (comment) |
724cf6b
to
650f7d4
Compare
650f7d4
to
b403d43
Compare
02ad520
to
6025216
Compare
Codecov ReportAttention: Patch coverage is
Additional details and impacted files@@ Coverage Diff @@
## main #5066 +/- ##
==========================================
- Coverage 71.47% 71.45% -0.03%
==========================================
Files 336 336
Lines 22625 22623 -2
Branches 3601 3601
==========================================
- Hits 16171 16165 -6
- Misses 4657 4660 +3
- Partials 1797 1798 +1
|
@@ -221,9 +221,9 @@ private SingleLogoutService findSingleLogoutService(IDPSSODescriptor idpSsoDescr | |||
private String buildAssertionConsumerEndpoint(String dashboardsRoot) { | |||
|
|||
if (dashboardsRoot.endsWith("/")) { | |||
return dashboardsRoot + "_opendistro/_security/saml/acs"; | |||
return dashboardsRoot + "_security/saml/acs"; |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
return dashboardsRoot + "_security/saml/acs"; | |
return dashboardsRoot + "_plugins/_security/saml/acs"; |
This instance and the one below both need to start with _plugins/
. I think I saw another instance above as well. Can you make sure the prefix still exists, but _opendistro
is replaced with _plugins
?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Fixed
6025216
to
7f85017
Compare
Removed: - `/_opendistro` route - `/_opendistro/kibanainfo` endpoint Signed-off-by: Andrey Pleskach <[email protected]>
@@ -36,23 +36,23 @@ | |||
* SuperAdmin certificate for the default superuser is stored as a kirk.pem file in config folder of OpenSearch | |||
* <p> | |||
* Example calling the PUT API as SuperAdmin using curl (if http basic auth is on): | |||
* curl -v --cacert path_to_config/root-ca.pem --cert path_to_config/kirk.pem --key path_to_config/kirk-key.pem -XPUT https://localhost:9200/_opendistro/_security/api/whitelist -H "Content-Type: application/json" -d’ | |||
* curl -v --cacert path_to_config/root-ca.pem --cert path_to_config/kirk.pem --key path_to_config/kirk-key.pem -XPUT https://localhost:9200/_security/api/whitelist -H "Content-Type: application/json" -d’ |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
There's other instances in this file too. I see a few others across the files covered in this PR that need to be updated.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I plan to remove the White List API in a follow-up PR, as the Allow List now fully replaces it.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Got it. Do we need to introduce another API like the migrate API to handle cases where a cluster may still be referencing whitelist.yml
?
Description
Removed:
/_opendistro
route/_opendistro/kibanainfo
endpointTesting
[Please provide details of testing done: unit testing, integration testing and manual testing]
Check List
By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.
For more information on following Developer Certificate of Origin and signing off your commits, please check here.