Updated docs for cross-cluster search (elastic/x-pack-elasticsearch#1478)
* Updated docs for cross-cluster search Wildcards are now supported in both cluster alias and index name, and the "view_index_metadata" privilege is automatically conferred by the "read_cross_cluster" role. * For now, best to allow users permissions to query all indices on all remote clusters Original commit: elastic/x-pack-elasticsearch@31959f78f4
This commit is contained in:
parent
87ff7f0b52
commit
844a97586e
|
@ -15,9 +15,6 @@ roles are passed to the remote clusters. A remote cluster checks the user's
|
|||
roles against its local role definitions to determine which indices the user
|
||||
is allowed to access.
|
||||
|
||||
NOTE: For the moment, cross cluster search with security enabled does not
|
||||
support using wildcards for either cluster or index names.
|
||||
|
||||
To use cross cluster search with secured clusters:
|
||||
|
||||
* Install {xpack} on every node in each connected cluster.
|
||||
|
@ -83,8 +80,7 @@ PUT _cluster_settings
|
|||
Next, set up a role called `cluster_two_logs` on both cluster `one` and
|
||||
cluster `two`.
|
||||
|
||||
On cluster `one`, this role allows the user to query indices called `logs-` on
|
||||
cluster `two`:
|
||||
On cluster `one`, this role allows the user to query any indices on remote clusters:
|
||||
|
||||
[source,js]
|
||||
-----------------------------------------------------------
|
||||
|
@ -93,7 +89,7 @@ POST /_xpack/security/role/cluster_two_logs
|
|||
"indices": [
|
||||
{
|
||||
"names": [
|
||||
"two:logs-*"
|
||||
"*:*"
|
||||
],
|
||||
"privileges": [
|
||||
"read"
|
||||
|
@ -120,8 +116,7 @@ POST /_xpack/security/role/cluster_two_logs
|
|||
],
|
||||
"privileges": [
|
||||
"read",
|
||||
"read_cross_cluster",
|
||||
"view_index_metadata"
|
||||
"read_cross_cluster"
|
||||
]
|
||||
}
|
||||
]
|
||||
|
|
Loading…
Reference in New Issue