From 0e57f7aaba17e8aadc203c67123d7d0cad46df68 Mon Sep 17 00:00:00 2001
From: Alexander Rogov <i_am@rogov.al>
Date: Sun, 12 Jul 2026 22:50:21 +0300
Subject: [PATCH] insecure os

---
 argocd/apps/mastodon.yaml         |  3 +--
 manifests/mastodon/secrets.yaml   | 10 ----------
 manifests/opensearch/cluster.yaml | 17 ++---------------
 3 files changed, 3 insertions(+), 27 deletions(-)

diff --git a/argocd/apps/mastodon.yaml b/argocd/apps/mastodon.yaml
index 5913729..61e4fa2 100644
--- a/argocd/apps/mastodon.yaml
+++ b/argocd/apps/mastodon.yaml
@@ -114,9 +114,8 @@ spec:
             enabled: true
             hostname: shared-os.opensearch.svc.cluster.local
             port: 9200
-            tls: true
+            tls: false
             preset: small_cluster
-            existingSecret: mastodon-os
           ingress:
             enabled: true
             className: traefik
diff --git a/manifests/mastodon/secrets.yaml b/manifests/mastodon/secrets.yaml
index 82c1621..bfe09ac 100644
--- a/manifests/mastodon/secrets.yaml
+++ b/manifests/mastodon/secrets.yaml
@@ -1,15 +1,5 @@
 apiVersion: v1
 kind: Secret
-metadata:
-  name: mastodon-os
-  namespace: mastodon
-type: Opaque
-stringData:
-  username: mastodon
-  password: "2&ey0J8c1pHbu%kP"
----
-apiVersion: v1
-kind: Secret
 metadata:
   name: os-ca
   namespace: mastodon
diff --git a/manifests/opensearch/cluster.yaml b/manifests/opensearch/cluster.yaml
index 5cbe754..f35076e 100644
--- a/manifests/opensearch/cluster.yaml
+++ b/manifests/opensearch/cluster.yaml
@@ -8,10 +8,8 @@ spec:
     version: "3.7.0"
     serviceName: shared-os
     setVMMaxMapCount: true
-  security:
-    config:
-      adminCredentialsSecret:
-        name: shared-os-admin-credentials
+    additionalConfig:
+      plugins.security.disabled: "true"
   nodePools:
     - component: nodes
       replicas: 3
@@ -34,14 +32,3 @@ spec:
         limits:
           cpu: 500m
           memory: 1Gi
-      probes:
-        readiness:
-          command:
-            - /bin/bash
-            - -c
-            - curl -k -u "$(cat /mnt/admin-credentials/username):$(cat /mnt/admin-credentials/password)" --silent --fail 'https://localhost:9200'
-        startup:
-          command:
-            - /bin/bash
-            - -c
-            - curl -k -u "$(cat /mnt/admin-credentials/username):$(cat /mnt/admin-credentials/password)" --silent --fail 'https://localhost:9200'