src/main/docker/elasticsearch/config/sg/sg_action_groups.yml

   1 UNLIMITED:
   2   readonly: true
   3   permissions:
   4     - "*"
   5
   6 ###### INDEX LEVEL ######
   7
   8 INDICES_ALL:
   9   readonly: true
  10   permissions:
  11     - "indices:*"
  12
  13 # for backward compatibility
  14 ALL:
  15   readonly: true
  16   permissions:
  17     - INDICES_ALL
  18
  19 MANAGE:
  20   readonly: true
  21   permissions:
  22     - "indices:monitor/*"
  23     - "indices:admin/*"
  24
  25 CREATE_INDEX:
  26   readonly: true
  27   permissions:
  28     - "indices:admin/create"
  29     - "indices:admin/mapping/put"
  30
  31 MANAGE_ALIASES:
  32   readonly: true
  33   permissions:
  34     - "indices:admin/aliases*"
  35
  36 INDEX_OWNER:
  37   - CREATE_INDEX
  38   - CRUD
  39
  40 # for backward compatibility
  41 MONITOR:
  42   readonly: true
  43   permissions:
  44     - INDICES_MONITOR
  45
  46 INDICES_MONITOR:
  47   readonly: true
  48   permissions:
  49     - "indices:monitor/*"
  50
  51 DATA_ACCESS:
  52   readonly: true
  53   permissions:
  54     - "indices:data/*"
  55     - CRUD
  56
  57 WRITE:
  58   readonly: true
  59   permissions:
  60     - "indices:data/write*"
  61     - "indices:admin/mapping/put"
  62
  63 READ:
  64   readonly: true
  65   permissions:
  66     - "indices:data/read*"
  67     - "indices:admin/mappings/fields/get*"
  68
  69 DELETE:
  70   readonly: true
  71   permissions:
  72     - "indices:data/write/delete*"
  73
  74 CRUD:
  75   readonly: true
  76   permissions:
  77     - READ
  78     - WRITE
  79
  80 SEARCH:
  81   readonly: true
  82   permissions:
  83     - "indices:data/read/search*"
  84     - "indices:data/read/msearch*"
  85     - SUGGEST
  86
  87 SUGGEST:
  88   readonly: true
  89   permissions:
  90     - "indices:data/read/suggest*"
  91
  92 INDEX:
  93   readonly: true
  94   permissions:
  95     - "indices:data/write/index*"
  96     - "indices:data/write/update*"
  97     - "indices:admin/mapping/put"
  98     - "indices:data/write/bulk*"
  99
 100 GET:
 101   readonly: true
 102   permissions:
 103     - "indices:data/read/get*"
 104     - "indices:data/read/mget*"
 105
 106 ###### CLUSTER LEVEL ######
 107
 108 CLUSTER_ALL:
 109   readonly: true
 110   permissions:
 111     - "cluster:*"
 112
 113 CLUSTER_MONITOR:
 114   readonly: true
 115   permissions:
 116     - "cluster:monitor/*"
 117
 118 CLUSTER_COMPOSITE_OPS_RO:
 119   readonly: true
 120   permissions:
 121     - "indices:data/read/mget"
 122     - "indices:data/read/msearch"
 123     - "indices:data/read/mtv"
 124     - "indices:admin/aliases/exists*"
 125     - "indices:admin/aliases/get*"
 126     - "indices:data/read/scroll"
 127
 128 CLUSTER_COMPOSITE_OPS:
 129   readonly: true
 130   permissions:
 131     - "indices:data/write/bulk"
 132     - "indices:admin/aliases*"
 133     - "indices:data/write/reindex"
 134     - CLUSTER_COMPOSITE_OPS_RO
 135
 136 MANAGE_SNAPSHOTS:
 137   readonly: true
 138   permissions:
 139     - "cluster:admin/snapshot/*"
 140     - "cluster:admin/repository/*"
 141
 142 # CLAMPDASHBOARD ELASTICSEARCH ENTRYPOINT
 143 GET_TEMPLATE:
 144   - "indices:admin/template/get"
 145 PUT_TEMPLATE:
 146   - "indices:admin/template/put"
 147 TEMPLATE_OWNER:
 148   - GET_TEMPLATE
 149   - PUT_TEMPLATE
 150 ES_INPUT:
 151   - TEMPLATE_OWNER
 152   - WRITE
 153   - MONITOR