Opensearch user management

[DLLMyammy]

Has there been any consideration in adding the security plugin to our OpenSearch deployment to enhance data protection and access controls? Opensearch docker doesnt seem to come with the security plugin by default. Without this any user including non admins can edit and delete indexes.

[mmguero]

This will be included with the Role-Based Access Control (RBAC) feature (#460) to be released later this month. Using Keycloak (either Malcolm's embedded instance or your own remote instance) you'll be able to map realm roles to OpenSearch roles, and there will be default built-in roles for read-only/read-write/etc.