Open Distro for Elasticsearch: reset default admin password

Question

I'm new to open distro for elasticsearch and trying to run it on the Kubernetes cluster. After deploying the cluster, I need to change the password for admin user.

I went through this post - default-password-reset

I came to know that, to change the password I need to do the following steps:

• exec in one of the master nodes
• generate a hash for the new password using /usr/share/elasticsearch/plugins/opendistro_security/tools/hash.sh script
• update /usr/share/elasticsearch/plugins/opendistro_security/securityconfig/internal_users.yml with the new hash
• run /usr/share/elasticsearch/plugins/opendistro_security/tools/securityadmin.sh with parameters

Questions:

• Is there any way to set those (via env or elasticsearch.yml) during bootstrapping the cluster?

Answer 1

I had to recreate internal_users.yml file with the updated password hashes and mounted the file in /usr/share/elasticsearch/plugins/opendistro_security/securityconfig/internal_users.yml directory for database pods.

So, when the Elasticsearch nodes bootstrapped, it bootstrapped with the updated password for default users ( i.e. admin ).

I used bcrypt go package to generate password hash.