honeymoose
/
OpenSearch
mirror of https://github.com/honeymoose/OpenSearch.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
OpenSearch/qa/smoke-test-ml-with-security/roles.yml

18 lines
451 B
YAML
Raw Normal View History

[ML] Add machine learning privileges/roles (elastic/x-pack-elasticsearch#673) * Changed ML action names to allow distinguishing of admin and read-only actions using wildcards * Added manage_ml and monitor_ml built-in privileges as subsets of the existing manage and monitor privileges * Added out-of-the-box machine_learning_admin and machine_learning_user roles * Changed machine learning results endpoints to use a NodeClient rather than an InternalClient when searching for results so that index/document level permissions applied to ML results are respected Original commit: elastic/x-pack-elasticsearch@eee800aaa8f20cefb084c813ec5eecbf42cde4cb
2017-03-14 12:13:41 -04:00
minimal:
cluster:
- cluster:monitor/health
- cluster:monitor/main
[TEST] Improve ML security test comments and account for new close assertion Original commit: elastic/x-pack-elasticsearch@004845bf2f0ab79304ba9514bd8611de9eb83577
2017-03-27 05:24:05 -04:00
- cluster:monitor/state
[ML] Add machine learning privileges/roles (elastic/x-pack-elasticsearch#673) * Changed ML action names to allow distinguishing of admin and read-only actions using wildcards * Added manage_ml and monitor_ml built-in privileges as subsets of the existing manage and monitor privileges * Added out-of-the-box machine_learning_admin and machine_learning_user roles * Changed machine learning results endpoints to use a NodeClient rather than an InternalClient when searching for results so that index/document level permissions applied to ML results are respected Original commit: elastic/x-pack-elasticsearch@eee800aaa8f20cefb084c813ec5eecbf42cde4cb
2017-03-14 12:13:41 -04:00
indices:
- names: '*'
privileges:
- indices:admin/create
- indices:admin/exists
- indices:admin/get
- indices:admin/mapping/put
- indices:admin/refresh
[ML] Automate detection of way to extract fields (elastic/x-pack-elasticsearch#1686) In 5.4.x, the datafeed attempts to get all fields from doc_values by default. It has a `_source` parameter which when enabled changes the strategy to instead try to get all fields from the source. This has been the most common issue users have been reporting as it means the datafeed will fail to fetch any text fields by default. This change uses the field capabilities API in order to automatically detect whether a field is aggregatable. It then extracts such fields from doc_values while the rest are taken from source. The change also adds validation to the start datafeed action so that if fields are missing mappings or the time field is not aggregatable we respond with an appropriate error. relates elastic/x-pack-elasticsearch#1649 Original commit: elastic/x-pack-elasticsearch@76e2cc6cb2c40aafc565af926d498b11066499ac
2017-06-12 09:56:31 -04:00
- indices:data/read/field_caps
[ML] Add machine learning privileges/roles (elastic/x-pack-elasticsearch#673) * Changed ML action names to allow distinguishing of admin and read-only actions using wildcards * Added manage_ml and monitor_ml built-in privileges as subsets of the existing manage and monitor privileges * Added out-of-the-box machine_learning_admin and machine_learning_user roles * Changed machine learning results endpoints to use a NodeClient rather than an InternalClient when searching for results so that index/document level permissions applied to ML results are respected Original commit: elastic/x-pack-elasticsearch@eee800aaa8f20cefb084c813ec5eecbf42cde4cb
2017-03-14 12:13:41 -04:00
- indices:data/read/search
- indices:data/write/bulk
- indices:data/write/index