[DEPRECATION] Security Plugin Tools will be replaced

[peternied]

Security Plugin tools will be replaced

This list of tools that will be replaced

.\tools\audit_config_migrater.bat
.\tools\audit_config_migrater.sh
.\tools\hash.bat
.\tools\hash.sh
.\tools\install_demo_configuration.sh
.\tools\securityadmin.bat
.\tools\securityadmin.sh

This issue will be updated with the recommended replacement.

Semantic Versioning Aside

OpenSearch will never remove functionality without a major version change to OpenSearch (e.g. v3.0.0+) so while these tools are marked deprecated, it is signal that they will be replaced at some point in the future major version update. I suspect that even after we have a replacement we will keep these tools through a major version to give time for migration.

[ComBin]

Can I know will replaced for what?

[realulli]

Several questions:

• Any pointers as to what hash.sh will be replaced with?
• Any pointers to the greater plan for security?

Right now, I can have my internal userbase under version control and just update the hashes. Since they're bcrypt, I consider them secure enough. The script could be simplified, yes, but other than that? Also, with the userbase there in the file, I can set up new systems rather quickly and efficiently.