OPENSEARCH INITIAL ADMIN PASSWORD does not take effect after the update

[nicolechec]

In version 2.18 of the official OpenSearch Docker image, the environment variable OPENSEARCH_INITIAL_ADMIN_PASSWORD was not updated as expected。When the INITIAL deployment, OPENSEARCH_INITIAL_ADMIN_PASSWORD was only A. After the update, set B. Now the query env is still A

1. installed Opensearch and modified opensearch statefulset
2. OPENSEARCH_INITIAL_ADMIN_PASSWORD is defined through extraEnvs

[peterzhuamazon]

If you previously have a version already installed then upgrade with OPENSEARCH_INITIAL_ADMIN_PASSWORD will only use the old password unless install from scratch with /etc/opensearch or config/ cleanup the user.

Considering directly changing the password of admin.

Thanks.

[nicolechec]

@peterzhuamazon thanks。Where is the OPENSEARCH INITIAL ADMIN PASSWORD stored? Is stored in persistent storage pvc？

[peterzhuamazon]

That would be a question for security team.
But to my understanding it is stored as a hash in config/opensearch-security/internal_users.yml
So if you previously create a user of admin already it will use the stored hash. Might be wrong. Thanks.

[peterzhuamazon]

Close this issue as it is not related to build repo.

Please feel free to reopen this one.

Thanks.