Passwords which may be passed via HTTP basic auth (as "<username>:<password>") shouldn't contain a colon. Although it should work according to corresponding RFC, a colon in password causes problems in some servers (Cortex at minimum).
Therefore, we only allow letters and numbers in most of the automatically generated passwords.

but not complete yet

Mostly removed parts that were planned, but are not true in the current version.

The Kibana plugin doesn't work in OSD, so the case must be created manually in The Hive.

update documentation - replace elasticsearch and kibana with opensearch and opensearch dashboatrds, add missing ports in documentation

Use API key of the predefined admin user, instead of the first soctools user (which can be easily removed).

add option to stop docker containers without destroy

See merge request !7

We don't use an explicit list of users in OSD, it only takes identification from Keycloak. This change assigns full access to any user. It's probably not the best solution, but the only one I can do quickly, now.

- users can have any email, it's no longer bound to configured "domain" (configure.sh updated)
- "domain" parameter replaced by "org_name", it can be any string, used as org.name in The Hive and Crtex (and MISP in the future)
- users are not created automatically in The Hive and Cortex - they will be crated using user-mgmt-web
- email is used as login in both TheHive and Cortex

Migrate from ODFE to OpenSearch

See merge request !5

- New config:
-- migration and renaming of Kibana->OSDasboards
-- removal of TheHiveButton plugin (not compatible with OSD, needs to be updated)
- Ansible role update-config fixed.
- The script to convert exported objects to a template updated.

related to migration from elasticsearch to opensearch

it's rather a workaround - the problem is caused by different "alert.metadata" field in different records and wrong auto-inferred schema which later cannot be converted, so I just modified the test data so the fields under "metadata" are always the same.

it's useful for any troubleshooting s it should be accessible as easy as the other services

- PutElasticsearchHttpRecord (deprecated) -> PutElasticsearchRecord
- Also, Elastic URL set to soctools-opensearches-[12], so data goes directly, not through haproxy
- Reverted change in access.ips, as it's not needed anymore

Quick start

See merge request !4

# Conflicts:
#   doc/install.md