Merge pull request #239 from magenx/dev

update opensearch security settings
magenx · May 19, 2024 · 4ce501d · 4ce501d
2 parents 5f42d9b + ab0a530
commit 4ce501d
Showing 1 changed file with 19 additions and 16 deletions.
diff --git a/magenx.install.latest.sh b/magenx.install.latest.sh
@@ -1191,22 +1191,26 @@ for ENV_SELECTED in "${ENV[@]}"
   -d "$(cat <<EOF
 {
     "cluster_permissions": [
-        "cluster_composite_ops_monitor",
-        "indices:admin/mappings/put",
-        "indices:admin/create",
-	"cluster:monitor/main"
+      "cluster_composite_ops_monitor",
+      "cluster:monitor/main",
+      "cluster:monitor/state",
+      "cluster:monitor/health"
     ],
     "index_permissions": [
-        {
-            "index_patterns": [
-                "indexer_${OWNER}*"
-            ],
-            "allowed_actions": [
-                "read",
-                "write"
-            ]
-        }
-    ]
+      {
+        "index_patterns": ["indexer_${OWNER}*"],
+        "fls": [],
+        "masked_fields": [],
+        "allowed_actions": ["*"]
+      },
+      {
+        "index_patterns": ["*"],
+        "fls": [],
+        "masked_fields": [],
+        "allowed_actions": ["indices:admin/aliases/get"]
+      }
+    ],
+    "tenant_permissions": []
 }
 EOF
 )"
@@ -1219,8 +1223,7 @@ echo ""
   -d "$(cat <<EOF
 {
     "password": "${INDEXER_PASSWORD}",
-    "opendistro_security_roles": ["indexer_${OWNER}"],
-    "backend_roles": ["indexer_${OWNER}"]
+    "opendistro_security_roles": ["indexer_${OWNER}", "own_index"]
 }
 EOF
 )"