33b89301fb
Enforces cluster permission checks for all cluster actions
...
Enforcing means that cluster actions will not be evaluated (as a fallback) by Index permissions. This enables us to move what typically would be considered indices actions and put them under the cluster privileges (a good example for this are all the template management APIs... we want to enforce cluster admin privileges over them).
Original commit: elastic/x-pack-elasticsearch@ee870954f2
2014-10-25 23:17:18 +02:00
4dc8a524f5
Merge branch 'master' of https://github.com/elasticsearch/elasticsearch-shield into doc-feedback
...
Conflicts:
docs/public/clients/java.asciidoc
Original commit: elastic/x-pack-elasticsearch@6478165c72
2014-10-24 15:10:26 -07:00
41e9d5db6d
added node tests
...
Original commit: elastic/x-pack-elasticsearch@c3957ea221
2014-10-24 16:35:39 -04:00
e98336872c
fix cluster license propagation logic; add logging
...
Original commit: elastic/x-pack-elasticsearch@854197169f
2014-10-24 14:13:23 -04:00
266a53d913
[CI] Add jacoco coverage profile
...
Original commit: elastic/x-pack-elasticsearch@1f9a665e8f
2014-10-24 10:16:03 -07:00
449edcda1d
* Throw a understandle error if an alert action doesn't exist
...
* Moved over to a copy on write map instead of a hash map that is protected by synchronized blocks
Original commit: elastic/x-pack-elasticsearch@285515d585
2014-10-24 18:50:47 +02:00
d608fe2b60
Build: Enable resource filtering to include version
...
Closes elastic/elasticsearch#200
Original commit: elastic/x-pack-elasticsearch@2cbf0cecf6
2014-10-24 09:37:43 -07:00
39182616c7
Added slf4j log4j bindings for quartz :(
...
Original commit: elastic/x-pack-elasticsearch@2bc5bda9ed
2014-10-24 18:18:42 +02:00
aa4720a2c8
Update License GET API; minor cleanup
...
Original commit: elastic/x-pack-elasticsearch@4d4d84caec
2014-10-24 12:03:11 -04:00
1a32243781
Changes to AlertManager:
...
* Made use of IndicesLifecycle, to catch when the .alerts index gets deleted, so we can clear the alerts
* Moved to concurrent hashmap in favour over normal hashmap with synchronized blocks
Original commit: elastic/x-pack-elasticsearch@5599d01c78
2014-10-24 16:51:12 +02:00
16a7991d6d
Rename and move the plugin class.
...
Original commit: elastic/x-pack-elasticsearch@b6f7a0490e
2014-10-24 14:31:20 +02:00
686f83ebb8
Merge pull request elastic/elasticsearch#14 from GaelTadh/change-packages
...
Alerting: Split alerting into packages
Original commit: elastic/x-pack-elasticsearch@68f2b86cb0
2014-10-24 13:22:15 +01:00
ac979c880d
Alerting : rename alerting package to alerts and fix test.
...
This commit renames the alerting package to alerts and will create the
alerts index on addAlert if needed.
Original commit: elastic/x-pack-elasticsearch@7cd691bd9b
2014-10-24 13:01:45 +01:00
db9fae8021
Alerting: Split alerting into packages
...
This commit adds separate packages for actions,triggers,rest, and the scheduler.
Original commit: elastic/x-pack-elasticsearch@e104bbc521
2014-10-24 12:32:18 +01:00
9b7b2214c0
Removed duplicate dependency
...
Original commit: elastic/x-pack-elasticsearch@58a9068b61
2014-10-24 13:13:59 +02:00
96fe2d9ddf
silly me
...
Original commit: elastic/x-pack-elasticsearch@b24829745d
2014-10-24 13:09:28 +02:00
6c66ca5fdc
Build: Updated the groupId and artifactId
...
Original commit: elastic/x-pack-elasticsearch@326d53f3ec
2014-10-24 13:07:36 +02:00
75ef2dc3b3
Initial step to running alerts on master and added a very simple test.
...
Original commit: elastic/x-pack-elasticsearch@480f6bd44b
2014-10-24 12:49:33 +02:00
1a5f72c28d
Packaging system cleanup
...
Original commit: elastic/x-pack-elasticsearch@9a8b2b7158
2014-10-23 22:02:26 -04:00
ceaefcb2c8
Initial node level tests; minor cleanup
...
Original commit: elastic/x-pack-elasticsearch@a917460b3c
2014-10-23 21:37:30 -04:00
2f3fe95f7e
esvm: Fix roles configuration used by esvm
...
Original commit: elastic/x-pack-elasticsearch@7a25eff61c
2014-10-23 14:36:49 -07:00
b3789a74e4
Merge branch 'master' of https://github.com/elasticsearch/elasticsearch-shield into doc-feedback
...
Conflicts:
docs/public/04-authorization.asciidoc
docs/public/clients/logstash.asciidoc
Original commit: elastic/x-pack-elasticsearch@699aa52379
2014-10-23 14:01:41 -07:00
941a440046
minor chagne
...
Original commit: elastic/x-pack-elasticsearch@b7306dc60a
2014-10-23 15:42:45 -04:00
28bc28e30d
LicensesClientService.register works even if there is no master; LicensesManagerService.licenses() returns
...
one appropriate license per registered feature
Original commit: elastic/x-pack-elasticsearch@4d3ac103d6
2014-10-23 15:37:58 -04:00
a52993db78
esvm: Added user configurations to make esvm usable again
...
Also added a logstash configuration for simple performance
testing (useful for comparing different hash functions)
Original commit: elastic/x-pack-elasticsearch@c9f08fbb12
2014-10-23 10:34:04 -07:00
a287863ab0
Added cluster & indices monitoring privileges to System
...
This is required for marvel agent to collect its data.
Closes elastic/elasticsearch#137
Original commit: elastic/x-pack-elasticsearch@c1ed58aafb
2014-10-23 19:19:50 +02:00
b7dac66c8a
Changed the cached hashing algorithm for cached realms
...
Now the passwords are hashed in-memory using SHA2 by default (instead of original bcrypt). Also, it's now possible to configure the in-memory hashing algorithm.
Original commit: elastic/x-pack-elasticsearch@e2d1b3116b
2014-10-23 19:15:31 +02:00
521ebe4672
Change the way patterns are resolved in roles.yml
...
Now, there are two types of supported patters:
- wildcards (default) - simple wildcard match where `*` indicates zero or more characters and `?` indicates a single character (`\` can be used as an escape charachter)
- regular expressions - can be "enabled" by wrapping the pattern in `/` (e.g. `/foo.*/`). The regex syntax is based on lucene's regex syntax (not Java's Pattern).
Closes elastic/elasticsearch#253
Original commit: elastic/x-pack-elasticsearch@edd912122d
2014-10-23 19:04:01 +02:00
d46b13e4f5
Merge branch 'master' of https://github.com/elasticsearch/elasticsearch-shield into doc-feedback
...
Original commit: elastic/x-pack-elasticsearch@9d1e4019e3
2014-10-23 09:21:35 -07:00
935f98a4b8
fix tests; improve client registeration
...
Original commit: elastic/x-pack-elasticsearch@e0464a4a1f
2014-10-23 12:07:16 -04:00
6f88c44030
fix conflict
...
Original commit: elastic/x-pack-elasticsearch@d0da2c43e3
2014-10-23 12:02:40 -04:00
82648c240f
Fixed typo in esusers help
...
Closes elastic/elasticsearch#216
Original commit: elastic/x-pack-elasticsearch@07b4782cdc
2014-10-23 12:42:40 +02:00
9b6823683c
Added some missing logging around realms
...
Closes elastic/elasticsearch#214
Original commit: elastic/x-pack-elasticsearch@648410ff8f
2014-10-23 11:15:02 +02:00
b2ffc1d7b9
Better error message for parsing error of role.yml
...
added the role name to the error message where the parsing error was encountered.
Closes elastic/elasticsearch#245
Original commit: elastic/x-pack-elasticsearch@303b932864
2014-10-23 11:02:31 +02:00
15a8ed090e
ignore failing tests
...
Original commit: elastic/x-pack-elasticsearch@53cdd48143
2014-10-22 23:31:25 -04:00
59b101cfab
LicensesService Notification work
...
Original commit: elastic/x-pack-elasticsearch@cd7260dec9
2014-10-22 23:24:00 -04:00
a6ba0eec2d
Merge branch 'master' of https://github.com/elasticsearch/elasticsearch-shield into doc-feedback
...
Conflicts:
docs/public/06-ldap.asciidoc
docs/public/08-auditing.asciidoc
docs/structured/01-introduction.asciidoc
docs/structured/02-architecture.asciidoc
Original commit: elastic/x-pack-elasticsearch@ddf1f0d910
2014-10-22 16:34:16 -07:00
b5b6a1093c
Fixes filename case typo
...
This fixes a file-name case typo for LdapSslSocketFactory
Original commit: elastic/x-pack-elasticsearch@fb71a1116e
2014-10-22 17:12:46 -06:00
4b0f7c4379
Fixed the url settings to only call the toArray. Plus I changed one of the tests to use the single value style
...
Original commit: elastic/x-pack-elasticsearch@16326d2b6c
2014-10-22 17:00:55 -06:00
f517a6a8f3
Refactors "urls" -> "url"
...
This lets the url be configured as a single element (the most likely usage) or as an array. This also checks that multiple urls are either all "ldaps", or all "ldap", as it is not possible to mix them.
Original commit: elastic/x-pack-elasticsearch@b5a94b1d35
2014-10-22 17:00:55 -06:00
0777e8d94f
Fixed a bug in Permissions with multiple indices permission groups
...
The evalutation of the indices permission groups was wrong. Now, each index in the request is evaluated against all groups, such that:
1. for each index, at least one group must grant the request
2. all indices must be granted
Along the way, also changed the audit logs structures such that:
- moved the principal to "sit" next to the host
- now, if we're logging an indices request, we also log the related indices (this provides more context to the actual request)
Fixes elastic/elasticsearch#242
Original commit: elastic/x-pack-elasticsearch@95600d3148
2014-10-23 00:46:56 +02:00
1f390cc654
Merge branch 'master' of https://github.com/elasticsearch/elasticsearch-shield into doc-feedback
...
Original commit: elastic/x-pack-elasticsearch@1dc6bee15d
2014-10-22 15:46:54 -07:00
996f7aadf7
nuked ESLicenseProvider; minor cleanups
...
Original commit: elastic/x-pack-elasticsearch@92af8dc307
2014-10-22 17:46:46 -04:00
df7eba437e
Merge branch 'master' of https://github.com/elasticsearch/elasticsearch-shield into doc-feedback
...
Original commit: elastic/x-pack-elasticsearch@4f890b59f6
2014-10-22 13:49:15 -07:00
d7b3f77586
Packaging system refactoring (WIP)
...
Original commit: elastic/x-pack-elasticsearch@29751a866d
2014-10-22 16:41:18 -04:00
d34c7cddf3
Merge branch 'master' of https://github.com/elasticsearch/elasticsearch-shield into doc-feedback
...
Conflicts:
docs/structured/03-getting-started.asciidoc
docs/structured/06-ldap.asciidoc
docs/structured/authentication/message-authentication.asciidoc
Original commit: elastic/x-pack-elasticsearch@642beb53ca
2014-10-22 12:02:29 -07:00
fa48c46813
Skip authentication for rest OPTIONS call
...
this is required by CORS for unauthenticated pre-flight OPTIONS requests
Closes elastic/elasticsearch#234
Original commit: elastic/x-pack-elasticsearch@c368b2cf27
2014-10-22 19:29:20 +02:00
1f153402ef
unify encoding; minor fixes & clean up imports
...
Original commit: elastic/x-pack-elasticsearch@0d00a7b177
2014-10-22 12:17:13 -04:00
3d71356596
Fixes Transport Client that start up with shield in the classpath
...
Now a NOOP transport filter is bound by to the secured transport service in a transport client
Fixes elastic/elasticsearch#165
Original commit: elastic/x-pack-elasticsearch@7268bd445c
2014-10-22 06:18:59 +02:00
3c551ab6d9
remove jackson as dep
...
Original commit: elastic/x-pack-elasticsearch@09418be764
2014-10-21 23:08:01 -04:00
uboness
Paul Echeverri
Areek Zillur
Bill Hwang
Martijn van Groningen
Alexander Reelsen
Brian Murphy
Igor Motov
c-a-m