Back to Opensearch

Security Plugin Integration

plugins/arrow-flight-rpc/docs/security-integration.md

3.6.0916 B
Original Source

Security Plugin Integration

The Arrow Flight RPC plugin integrates with the OpenSearch Security plugin to provide secure streaming transport with TLS encryption.

Configuration

Add these settings to opensearch.yml:

yaml
# Enable streaming transport
opensearch.experimental.feature.transport.stream.enabled: true

# Use secure Flight as default transport
transport.stream.type.default: FLIGHT-SECURE

# Enable Flight TLS
flight.ssl.enable: true

Security Plugin Setup

Install and configure the security plugin:

bash
# Install security plugin
bin/opensearch-plugin install opensearch-security

# Setup demo configuration
plugins/opensearch-security/tools/install_demo_configuration.sh

Role-Based Access Control

The Flight transport supports all security plugin features:

  • Index-level permissions
  • Document-level security (DLS)
  • Field-level security (FLS)
  • Action-level permissions