CR-2026-02-25: Wazuh Credential Rotation — Verification

Current indexer password retrieved from K8s secret

[ ]

Current password verified working against OpenSearch API

[ ]

Cluster health is green before rotation

[ ]

New password works against OpenSearch API (cluster health: green)

[x]

Old password rejected (HTTP 401)

[x]

New password stored in gopass

[x]

K8s secret updated with new password

[x]

OpenSearch internal_users.yml updated via securityadmin.sh

[x]

All pods restarted in correct dependency order

[x]

Wazuh dashboard accessible with new credentials

[x]