honeymoose
/
OpenSearch
mirror of https://github.com/honeymoose/OpenSearch.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
OpenSearch/x-pack/plugin/watcher/qa/with-security/roles.yml

41 lines
757 B
YAML
Raw Normal View History

added watcher+shield qa rest tests only run watcher rest tests during verify phase never run the rest tests with shield enabled, because that is now tested in the new qa module removed the disabled license watcher rest tests, because the disabled license use case is already tested by the LicenseIntegrationTests enabled the getting started rest test Closes elastic/elasticsearch#403 Original commit: elastic/x-pack-elasticsearch@67f0f7f5966eca323627dd7b33fb41aea9f060fb
2015-08-11 18:09:05 -04:00
admin:
security: file parsing only supports the new format This commit remove the pre-existing file parsing code and replaces it with the updated code in the RoleDescriptor class. This unifies the parsing for the files and API for roles. Closes elastic/elasticsearch#1596 Original commit: elastic/x-pack-elasticsearch@9e0b58fcf1edb72913c30d05c6fc6031309d62bf
2016-03-15 13:10:40 -04:00
cluster:
- all
added watcher+shield qa rest tests only run watcher rest tests during verify phase never run the rest tests with shield enabled, because that is now tested in the new qa module removed the disabled license watcher rest tests, because the disabled license use case is already tested by the LicenseIntegrationTests enabled the getting started rest test Closes elastic/elasticsearch#403 Original commit: elastic/x-pack-elasticsearch@67f0f7f5966eca323627dd7b33fb41aea9f060fb
2015-08-11 18:09:05 -04:00
indices:
security: file parsing only supports the new format This commit remove the pre-existing file parsing code and replaces it with the updated code in the RoleDescriptor class. This unifies the parsing for the files and API for roles. Closes elastic/elasticsearch#1596 Original commit: elastic/x-pack-elasticsearch@9e0b58fcf1edb72913c30d05c6fc6031309d62bf
2016-03-15 13:10:40 -04:00
- names: '*'
privileges:
- all
added watcher+shield qa rest tests only run watcher rest tests during verify phase never run the rest tests with shield enabled, because that is now tested in the new qa module removed the disabled license watcher rest tests, because the disabled license use case is already tested by the LicenseIntegrationTests enabled the getting started rest test Closes elastic/elasticsearch#403 Original commit: elastic/x-pack-elasticsearch@67f0f7f5966eca323627dd7b33fb41aea9f060fb
2015-08-11 18:09:05 -04:00
watcher_manager:
security: file parsing only supports the new format This commit remove the pre-existing file parsing code and replaces it with the updated code in the RoleDescriptor class. This unifies the parsing for the files and API for roles. Closes elastic/elasticsearch#1596 Original commit: elastic/x-pack-elasticsearch@9e0b58fcf1edb72913c30d05c6fc6031309d62bf
2016-03-15 13:10:40 -04:00
cluster:
remove watcher and graph privileges. manage does not include security Original commit: elastic/x-pack-elasticsearch@da250ed84224653f6fd8e0035ba6f4edeaf82d54
2016-03-17 12:51:03 -04:00
- manage
added watcher+shield qa rest tests only run watcher rest tests during verify phase never run the rest tests with shield enabled, because that is now tested in the new qa module removed the disabled license watcher rest tests, because the disabled license use case is already tested by the LicenseIntegrationTests enabled the getting started rest test Closes elastic/elasticsearch#403 Original commit: elastic/x-pack-elasticsearch@67f0f7f5966eca323627dd7b33fb41aea9f060fb
2015-08-11 18:09:05 -04:00
indices:
Watcher: Remove in memory watch store (elastic/elasticsearch#4201) In order to prepare to the distributed watch execution, this commit removes the in memory watch store. Whenever a watch is needed now, a get request is executed and the parsing is done. This happens when * Put * Get * Ack * Activate/Deactivate * Execute Note: This also means there are no usage stats currently regarding the watch count, because we would need to execute a query. This would require the usage stats to be async, see elastic/elasticsearch#3569 Another advantage is, that there is no dirty flag in the watch itself needed anymore, because the watch is always the latest. Also write operations store immediately and dont leave anything in memory. Also ActionListener.wrap() was used a lot instead of more verbose anonmyous inner classes. Original commit: elastic/x-pack-elasticsearch@c47465b47cad72d3e46e951fd46347545cb69f1a
2016-12-13 02:54:03 -05:00
- names: '.watch*'
security: file parsing only supports the new format This commit remove the pre-existing file parsing code and replaces it with the updated code in the RoleDescriptor class. This unifies the parsing for the files and API for roles. Closes elastic/elasticsearch#1596 Original commit: elastic/x-pack-elasticsearch@9e0b58fcf1edb72913c30d05c6fc6031309d62bf
2016-03-15 13:10:40 -04:00
privileges:
- all
Tests: Remove @ClusterScope tests, create REST tests (elastic/x-pack-elasticsearch#2131) Replacing integration tests with rest tests and unit tests, thus removing integration tests that require start of a new cluster. Removing unused testing methods Original commit: elastic/x-pack-elasticsearch@265966d80cea64431048abce5ee6852bba7bffb9
2017-08-01 08:15:36 -04:00
# this index gets created by one of the watcher yaml tests
# and is needed for a search transform, so we have to create it as part of the test
- names: 'my_test_index'
privileges:
- all
security: file parsing only supports the new format This commit remove the pre-existing file parsing code and replaces it with the updated code in the RoleDescriptor class. This unifies the parsing for the files and API for roles. Closes elastic/elasticsearch#1596 Original commit: elastic/x-pack-elasticsearch@9e0b58fcf1edb72913c30d05c6fc6031309d62bf
2016-03-15 13:10:40 -04:00
run_as:
- powerless_user
- watcher_manager
Watcher: Store username on watch execution (#31873) There is currently no way to see what user executed a watch. This commit adds the decrypted username to each execution in the watch history, in a new field "user". Closes #31772
2018-07-16 15:20:16 -04:00
- x_pack_rest_user
added watcher+shield qa rest tests only run watcher rest tests during verify phase never run the rest tests with shield enabled, because that is now tested in the new qa module removed the disabled license watcher rest tests, because the disabled license use case is already tested by the LicenseIntegrationTests enabled the getting started rest test Closes elastic/elasticsearch#403 Original commit: elastic/x-pack-elasticsearch@67f0f7f5966eca323627dd7b33fb41aea9f060fb
2015-08-11 18:09:05 -04:00
watcher_monitor:
security: file parsing only supports the new format This commit remove the pre-existing file parsing code and replaces it with the updated code in the RoleDescriptor class. This unifies the parsing for the files and API for roles. Closes elastic/elasticsearch#1596 Original commit: elastic/x-pack-elasticsearch@9e0b58fcf1edb72913c30d05c6fc6031309d62bf
2016-03-15 13:10:40 -04:00
cluster:
remove watcher and graph privileges. manage does not include security Original commit: elastic/x-pack-elasticsearch@da250ed84224653f6fd8e0035ba6f4edeaf82d54
2016-03-17 12:51:03 -04:00
- monitor
added watcher+shield qa rest tests only run watcher rest tests during verify phase never run the rest tests with shield enabled, because that is now tested in the new qa module removed the disabled license watcher rest tests, because the disabled license use case is already tested by the LicenseIntegrationTests enabled the getting started rest test Closes elastic/elasticsearch#403 Original commit: elastic/x-pack-elasticsearch@67f0f7f5966eca323627dd7b33fb41aea9f060fb
2015-08-11 18:09:05 -04:00
indices:
security: file parsing only supports the new format This commit remove the pre-existing file parsing code and replaces it with the updated code in the RoleDescriptor class. This unifies the parsing for the files and API for roles. Closes elastic/elasticsearch#1596 Original commit: elastic/x-pack-elasticsearch@9e0b58fcf1edb72913c30d05c6fc6031309d62bf
2016-03-15 13:10:40 -04:00
- names: '.watcher-history-*'
privileges:
- read
added watcher+shield qa rest tests only run watcher rest tests during verify phase never run the rest tests with shield enabled, because that is now tested in the new qa module removed the disabled license watcher rest tests, because the disabled license use case is already tested by the LicenseIntegrationTests enabled the getting started rest test Closes elastic/elasticsearch#403 Original commit: elastic/x-pack-elasticsearch@67f0f7f5966eca323627dd7b33fb41aea9f060fb
2015-08-11 18:09:05 -04:00
Test: Make rest tests extend ESTestCase This is the xplugins side of elastic/elasticsearchelastic/elasticsearch#16070. Original commit: elastic/x-pack-elasticsearch@57d1a9108b7888b50cb56090bc588128240220bf
2016-01-18 19:41:30 -05:00
crappy_role:
added watcher+shield qa rest tests only run watcher rest tests during verify phase never run the rest tests with shield enabled, because that is now tested in the new qa module removed the disabled license watcher rest tests, because the disabled license use case is already tested by the LicenseIntegrationTests enabled the getting started rest test Closes elastic/elasticsearch#403 Original commit: elastic/x-pack-elasticsearch@67f0f7f5966eca323627dd7b33fb41aea9f060fb
2015-08-11 18:09:05 -04:00
cluster:
- cluster:monitor/nodes/info
- cluster:monitor/health
Test: Make rest tests extend ESTestCase This is the xplugins side of elastic/elasticsearchelastic/elasticsearch#16070. Original commit: elastic/x-pack-elasticsearch@57d1a9108b7888b50cb56090bc588128240220bf
2016-01-18 19:41:30 -05:00
- cluster:monitor/nodes/liveness
security: add support for main action This commit adds support for the change in elasticsearch where the `/` rest endpoint now delegates to an action and can be authorized. Original commit: elastic/x-pack-elasticsearch@8ef38ce50fde11c0a5ed0cbefc8169c717e1447e
2016-04-07 05:55:06 -04:00
- cluster:monitor/main
Test: Make rest tests extend ESTestCase This is the xplugins side of elastic/elasticsearchelastic/elasticsearch#16070. Original commit: elastic/x-pack-elasticsearch@57d1a9108b7888b50cb56090bc588128240220bf
2016-01-18 19:41:30 -05:00