fix: remove inert opensearch_security.cookie.ttl setting (#1534)

The dashboard config declares opensearch_security.cookie.ttl, but the
security plugin never reads it: only opensearch_security.session.ttl
governs session/cookie expiry. Shipping the setting misleads operators
into believing it bounds the cookie lifetime.

Signed-off-by: Antonio David Gutiérrez <antonio.gutierrez@wazuh.com>
Co-authored-by: Claude <noreply@anthropic.com>

Author: Desvelao

config/opensearch_dashboards.prod.yml

@@ -4,16 +4,15 @@ opensearch.hosts: https://localhost:9200
 opensearch.ssl.verificationMode: certificate
 #opensearch.username:
 #opensearch.password:
-opensearch.requestHeadersAllowlist: ["securitytenant","Authorization"]
+opensearch.requestHeadersAllowlist: ['securitytenant', 'Authorization']
 opensearch_security.multitenancy.enabled: false
-opensearch_security.readonly_mode.roles: ["kibana_read_only"]
+opensearch_security.readonly_mode.roles: ['kibana_read_only']
 server.ssl.enabled: true
-server.ssl.key: "/etc/wazuh-dashboard/certs/dashboard-key.pem"
-server.ssl.certificate: "/etc/wazuh-dashboard/certs/dashboard.pem"
-opensearch.ssl.certificateAuthorities: ["/etc/wazuh-dashboard/certs/root-ca.pem"]
+server.ssl.key: '/etc/wazuh-dashboard/certs/dashboard-key.pem'
+server.ssl.certificate: '/etc/wazuh-dashboard/certs/dashboard.pem'
+opensearch.ssl.certificateAuthorities: ['/etc/wazuh-dashboard/certs/root-ca.pem']
 uiSettings.overrides.defaultRoute: /app/wz-home
 # Session expiration settings
-opensearch_security.cookie.ttl: 900000
 opensearch_security.session.ttl: 900000
 opensearch_security.session.keepalive: true
 

docker/config/opensearch_dashboards.dev.security.yml

@@ -1,15 +1,14 @@
-server.host: "0.0.0.0"
+server.host: '0.0.0.0'
 
-opensearch.hosts: ["https://indexer:9200"]
+opensearch.hosts: ['https://indexer:9200']
 opensearch.ssl.verificationMode: none
-opensearch.username: "kibanaserver"
-opensearch.password: "kibanaserver"
-opensearch.requestHeadersWhitelist: [ authorization,securitytenant ]
+opensearch.username: 'kibanaserver'
+opensearch.password: 'kibanaserver'
+opensearch.requestHeadersWhitelist: [authorization, securitytenant]
 opensearch_security.multitenancy.enabled: true
-opensearch_security.multitenancy.tenants.preferred: ["Private", "Global"]
-opensearch_security.readonly_mode.roles: ["kibana_read_only"]
+opensearch_security.multitenancy.tenants.preferred: ['Private', 'Global']
+opensearch_security.readonly_mode.roles: ['kibana_read_only']
 # Session expiration settings
-opensearch_security.cookie.ttl: 900000
 opensearch_security.session.ttl: 900000
 opensearch_security.session.keepalive: true