Opensearch, index pattern permissions, lehetseges?

Linux-haladó

a problemam az, lehet e definialni a new Opensearch alatt azt, hogy egyik local user csak a samplepattern1-et lassa, a masik local user pedig mondjuk  samplepattern2-t es 3-at, de semmikeppen se az egyet? (persze ezek indices-hez vannak rendelve)

 

valamit konfiguraltam, de csak a "*" -t fogadja el a ponton, ahol meg kell adni az indexpatternokat - ezsetben mindegyik patternt latja a user, de ha mar ezt irom be: 

samplepattern*

ez mar nem megy

 

Lehet, rosszul csinalok valamit?

( Qury v | 2023. 09. 24., v – 12:13 )

hozz letre role-okat amiben megadod hogy melyik patternhez ferhessen hozza a role.

PUT _plugins/_security/api/roles/test_role1

{
  
    "reserved": false,
    "hidden": false,
    "cluster_permissions": [],
    "index_permissions": [
      {
        "index_patterns": [
          "samplepattern2",
          "samplepattern3"
        ],
        "dls": "",
        "fls": [],
        "masked_fields": [],
        "allowed_actions": [
          "search",
          "read"
        ]
      }
    ],
    "tenant_permissions": [],
    "static": false
  
}

Support Slackware: https://paypal.me/volkerdi

( dotnetlinux | 2023. 09. 25., h – 22:28 )

Nem tudod kizárni exclude_index_permissions-szel a sima usert?

Próbáltad tömbbel és anélkül is?

"index_patterns": [
  "samplepattern*",
],

"index_patterns": "samplepattern*",

@BCsabaEngine

( dotnetlinux | 2023. 09. 25., h – 22:31 )

Doksiban ezt írják:

Ah, I see what you mean now. Unfortunately, it is not currently possible to use wildcards on the permissions side to grant permissions to all indices that match a certain pattern. You would need to explicitly list out each index that you want to grant permissions to.

However, if you have a large number of indices that you want to grant permissions to, you could consider using a script to generate the necessary permissions for you based on a certain pattern or criteria. This could save you time and effort in listing out each individual index.

@BCsabaEngine