-
Suggestion
-
Resolution: Done
-
None
-
None
-
None
Current behaviour
This is a continuation of SCALE-149. Currently, if you enable OpenSearch in values.yaml, the OpenSearch parameters are added as a JVM parameter, which is then printed in logs, exposing the OpenSearch password in clear text. Also from 9.2.3 the opensearch.password parameter is obsolete and must be set using the additionalEnvironmentVariables parameter of the Helm chart.
Suggested improvement
To avoid this, please enhance the helm charts to add OpenSearch parameters in the confluence.cfg.xml file if OpenSearch is enabled in the values.yaml file. The password should then be encrypted per this knowledge article.. And the upgrade to 9.2.3 will not fail due to an OpenSearch connectivity issue.