honeymoose
/
OpenSearch
mirror of https://github.com/honeymoose/OpenSearch.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
44,593 Commits 7 Branches 6 Tags 546 MiB
Commit Graph

191 Commits

Author SHA1 Message Date
Yogesh Gaikwad fe36861ada
Add support for API keys to access Elasticsearch (#38291) 
X-Pack security supports built-in authentication service
`token-service` that allows access tokens to be used to 
access Elasticsearch without using Basic authentication.
The tokens are generated by `token-service` based on
OAuth2 spec. The access token is a short-lived token
(defaults to 20m) and refresh token with a lifetime of 24 hours,
making them unsuitable for long-lived or recurring tasks where
the system might go offline thereby failing refresh of tokens.

This commit introduces a built-in authentication service
`api-key-service` that adds support for long-lived tokens aka API
keys to access Elasticsearch. The `api-key-service` is consulted
after `token-service` in the authentication chain. By default,
if TLS is enabled then `api-key-service` is also enabled.
The service can be disabled using the configuration setting.

The API keys:-
- by default do not have an expiration but expiration can be
  configured where the API keys need to be expired after a
  certain amount of time.
- when generated will keep authentication information of the user that
   generated them.
- can be defined with a role describing the privileges for accessing
   Elasticsearch and will be limited by the role of the user that
   generated them
- can be invalidated via invalidation API
- information can be retrieved via a get API
- that have been expired or invalidated will be retained for 1 week
  before being deleted. The expired API keys remover task handles this.

Following are the API key management APIs:-
1. Create API Key - `PUT/POST /_security/api_key`
2. Get API key(s) - `GET /_security/api_key`
3. Invalidate API Key(s) `DELETE /_security/api_key`

The API keys can be used to access Elasticsearch using `Authorization`
header, where the auth scheme is `ApiKey` and the credentials, is the 
base64 encoding of API key Id and API key separated by a colon.
Example:-
```
curl -H "Authorization: ApiKey YXBpLWtleS1pZDphcGkta2V5" http://localhost:9200/_cluster/health
```

Closes #34383
 2019-02-05 14:21:57 +11:00
Benjamin Trent 8280a20664
ML: Add upgrade mode docs, hlrc, and fix bug (#37942) 
* ML: Add upgrade mode docs, hlrc, and fix bug

* [DOCS] Fixes build error and edits text

* adjusting docs

* Update docs/reference/ml/apis/set-upgrade-mode.asciidoc

Co-Authored-By: benwtrent <ben.w.trent@gmail.com>

* Update set-upgrade-mode.asciidoc

* Update set-upgrade-mode.asciidoc
 2019-01-30 06:51:11 -06:00
Nick Knize 4b17055035
HLRC: Add get users action (#36332) 
This commit adds get user action to the high level rest client.
 2018-12-13 12:24:48 -06:00
Tim Vernum 143f151185
HLRC: Implement get-user-privileges API (#36292) 
This adds the _security/user/_privileges API to the High
Level Rest Client.

This also makes some changes to the Java model for the Role APIs
in order to better accommodate the GetPrivileges API
 2018-12-12 15:12:49 +11:00
Andy Bristol 10938e5135
[hlrc] add index templates exist API (#36132) 
This commit adds support for the index templates exist API, creating
new client-side request types for that API and the get index
templates API. Also adds links in hlrc docs to pages for supported
index template APIs
 2018-12-10 08:11:57 -08:00
Albert Zaharovits dad6f1c9fe
[HLRC] Put Role (#36209) 
This commit adds support for the put role API in the
java high level rest client.
 2018-12-10 09:41:31 +02:00
Martijn van Groningen f4aac8d3f1
[HLRC] Added support for Follow Stats API (#36253) 
This change also adds documentation for the Follow Stats API.

Relates to #33824
 2018-12-09 19:59:08 +01:00
Yogesh Gaikwad 32c4f99238
[HLRC] Add support for put privileges API (#35679) 
This commit adds support for API to create or update
application privileges in high-level rest client.
 2018-12-09 16:03:28 +11:00
Nik Everett ead2b9e08b
HLRC: Add rollup search (#36334) 
Relates to #29827
 2018-12-07 14:39:58 -05:00
Nhat Nguyen 32a7d7abd5
HLRC: Add delete template API (#36320) 
Relates #27205
 2018-12-07 10:46:03 -05:00
Michael Basnight ca09936cdf
HLRC: Get Deprecation Info API (#36279) 
This commit adds the Get Deprecation Info API and associated
documentation.

Relates #29827
 2018-12-07 08:22:21 -06:00
Alan Woodward d2886e1c81
HLRC: execute watch API (#35868) 
This change adds support for the execute watch API in the high level rest client
 2018-12-05 12:41:42 +00:00
Martijn van Groningen 786697a4b2
[HLRC] Added support for CCR Stats API (#36213) 
This change also adds documentation for the CCR Stats API.

Relates to #33824
 2018-12-05 13:14:51 +01:00
Martijn van Groningen 579be9142e
[HLRC] Added support for CCR Get Auto Follow Pattern apis (#36049) 
This change also adds documentation for the Get Auto Follow Pattern API.

Relates to #33824
 2018-12-04 07:41:29 +01:00
Jim Ferenczi 08b9e31373 [TEST] fix link in get-watch documentation 2018-11-30 14:40:09 +01:00
Jim Ferenczi 5c7b2c5f9b
HLRC: Add get watch API (#35531) 
This changes adds the support for the get watch API in the high level rest client.
 2018-11-30 11:02:46 +01:00
Martijn van Groningen 6d01170ca1
[HLRC] Added support for CCR Delete Auto Follow Pattern API (#35981) 
This change also adds documentation for the Delete Auto Follow Pattern API.

Relates to #33824
 2018-11-29 08:06:31 +01:00
Ignacio Vera 93ed8b7d61
HLRC: Add delete user action (#35294) 
* HLRC: Add delete user action

It adds delete user action to the high level rest client.

Relates #29827
 2018-11-29 07:52:56 +01:00
Simon Willnauer 89e4ac8fcc
Add high-level REST client API for `_freeze` and `_unfreeze` (#35723) 
This change adds support for `_freeze` and `_unfreeze` to the HLRC

Relates to #34352
 2018-11-28 15:42:12 +01:00
Vladimir Dolzhenko f0c5f0c099 [HLRC] XPack ML info action (#35777) 
Relates to #29827
 2018-11-28 10:58:20 +00:00
Michael Basnight 19ed17195f
Docs: DRY up indices docs (#35971) 
This commit DRYs up the indices folder as well as fixing a few minor
mishaps that were in the docs.
 2018-11-27 19:40:49 -06:00
Tal Levy fe603e9163
[ILM] add HLRC docs to remove-policy-from-index (#35759) 
This primarily introduces documentation for the HLRC
remove-policy-from-index action.
 2018-11-27 13:28:58 -08:00
Martijn van Groningen df1e02d0d5
[HLRC] Added support for CCR Put Auto Follow Pattern API (#35780) 
This change also adds documentation for the Put Auto Follow Pattern API.

Relates to #33824
 2018-11-27 08:53:22 +01:00
Gordon Brown 5c11b8612a
Add HLRC docs for Explain Lifecycle (#35803) 
Adds HLRC documentation for the Explain Lifecycle API.
 2018-11-26 15:25:56 -07:00
Ed Savage 13e11966ca
[HLRC][ML] Add delete expired data API (#35906) 
Relates to #29827
 2018-11-26 16:15:54 +00:00
Ioannis Kakavas acb65dd004 [DOCS] Fix missing include for get-roles 2018-11-26 11:45:39 +02:00
Ioannis Kakavas 8daa854f90
[HLRC] Add support for get roles API (#35787) 
This commits adds support for the Get Roles API to the HLRC

Relates: #29827
 2018-11-26 11:25:07 +02:00
Benjamin Trent 90a8e4b259
HLRC: ML Delete event from Calendar (#35760) 
* HLRC: Delete event from calendar

* adjusting tests

* adjusting code to make it more readable
 2018-11-21 16:22:04 -06:00
Ioannis Kakavas 25f83ae08c
[HLRC] Add support for get application privileges API (#35556) 
This commits adds support for the Get Application Privileges
API to the HLRC

Relates: #29827
 2018-11-21 16:38:17 +02:00
Martijn van Groningen 9b2ab064cf
[HLRC] Added support for CCR Resume Follow API (#35638) 
This change also adds documentation for the Resume Follow API

Relates to #33824
 2018-11-21 10:52:03 +01:00
Ed Savage 4f857c4f8d
[HLRC][ML] Add ML revert model snapshot API (#35750) 
Relates to #29827
 2018-11-21 09:10:37 +00:00
Martijn van Groningen a6647a20a9
[HLRC] Added support for CCR Unfollow API (#35693) 
This change also adds documentation for the Unfollow API

Relates to #33824
 2018-11-21 07:48:29 +01:00
Benjamin Trent 84db1e42c0
HLRC: ML Get Calendar Events (#35747) 
* HLRC: ML Get Calendar Events

* Addressing PR comments
 2018-11-20 16:40:31 -06:00
Gordon Brown 17780ce07e
Add HLRC docs for Delete Lifecycle Policy (#35664) 
Adds documenatation for the Delete Lifecycle Policy API to the HLRC
documentation.
 2018-11-20 11:32:41 -07:00
Tal Levy d061b3999a
[ILM] HLRC-ILM Retry Lifecycle Policy docs (#35715) 
this adds documentation for the retry method in the
high-level-ilm-rest-client.

this PR also renames retryLifecycleStep to retryLifecyclePolicy in the index-lifecycle-client
 2018-11-20 07:05:27 -08:00
Benjamin Trent 7657e6d274
HLRC ML Add Event To Calendar API (#35704) 
* HLRC: ML Adding Post event to calendar api

* Fixing tests and serialization

* removing unused import
 2018-11-20 08:15:21 -06:00
Benjamin Trent d707838c02
HLRC: ML Delete job from calendar (#35713) 2018-11-20 07:43:34 -06:00
Ed Savage 844483a99a
[HLRC][ML] Add ML update model snapshot API (#35537) (#35694) 
Relates to #29827
 2018-11-20 12:18:29 +00:00
Gordon Brown e012ac4649
Add HLRC docs for ILM Start/Stop/Status (#35672) 
Adds HLRC documentation for Start ILM, Stop ILM, and ILM Status APIs, as
these APIs are tightly linked to each other.
 2018-11-19 17:17:01 -07:00
Benjamin Trent 214bc96738
HLRC: ML Add Job to Calendar API (#35666) 2018-11-19 11:41:49 -06:00
Mayya Sharipova aaeb47d1f7
HLRC for _mtermvectors (#35266) 
relates to #27205
 2018-11-19 12:24:31 -05:00
Ignacio Vera ae6a33237f
HLRC: Add ML delete filter action (#35382) 
* HLRC: Add ML delete filter action

It adds delete ML filter action to the high level rest client.

Relates #29827
 2018-11-19 11:25:35 +01:00
Gordon Brown bb51cdb6de
Add HLRC docs for Get Lifecycle Policy (#35612) 
Adds docs for the Get Lifecycle Policy API to the HLRC documentation.
 2018-11-16 18:16:30 -07:00
Tim Vernum 87a8b99724
HLRC: Add "_has_privileges" API to Security Client (#35479) 
This adds the "hasPrivileges()" method to SecurityClient, including
request, response & async variant of the method.

Also includes API documentation.
 2018-11-16 13:52:06 +11:00
Ed Savage 2d948a001e
[HLRC][ML] Add ML delete model snapshot API (#35537) 
Relates to #29827
 2018-11-15 14:57:17 +00:00
Benjamin Trent 803eccec11
HLRC: Adding ML Update Filter API (#35522) 
* HLRC: Adding ml get filters api

* HLRC: Adding ML Update Filter API
 2018-11-14 11:13:11 -06:00
Tanguy Leroux 5b7446bb5f
Add Delete Privileges API to HLRC (#35454) 
This commit adds the Delete Privileges API to the high level REST
client.

Related to #29827
 2018-11-14 14:04:30 +01:00
Ed Savage e7b7d52a6a
[HLRC][ML] Add ML get model snapshots API (#35487) 
Relates #29827
 2018-11-14 13:03:04 +00:00
Christoph Büscher 603d1a470f
Add stop rollup job support to HL REST Client (#34702) 
This change adds support for stoping a rollup job to the High Level REST Client.

Relates to #29827
 2018-11-14 05:40:42 +01:00
Benjamin Trent b9eb5f7b63
HLRC: Adding ml get filters api (#35502) 
* HLRC: Adding ml get filters api

* refactoring setId name
 2018-11-13 14:53:32 -06:00