kubernetes/aai/charts/aai-elasticsearch/resources/config/sg/sg_action_groups.yml

   1 UNLIMITED:
   2   readonly: true
   3   permissions:
   4     - "*"
   5
   6 ###### INDEX LEVEL ######
   7
   8 INDICES_ALL:
   9   readonly: true
  10   permissions:
  11     - "indices:*"
  12
  13 # for backward compatibility
  14 ALL:
  15   readonly: true
  16   permissions:
  17     - INDICES_ALL
  18
  19 MANAGE:
  20   readonly: true
  21   permissions:
  22     - "indices:monitor/*"
  23     - "indices:admin/*"
  24
  25 CREATE_INDEX:
  26   readonly: true
  27   permissions:
  28     - "indices:admin/create"
  29     - "indices:admin/mapping/put"
  30
  31 MANAGE_ALIASES:
  32   readonly: true
  33   permissions:
  34     - "indices:admin/aliases*"
  35
  36 # for backward compatibility
  37 MONITOR:
  38   readonly: true
  39   permissions:
  40     - INDICES_MONITOR
  41
  42 INDICES_MONITOR:
  43   readonly: true
  44   permissions:
  45     - "indices:monitor/*"
  46
  47 DATA_ACCESS:
  48   readonly: true
  49   permissions:
  50     - "indices:data/*"
  51     - CRUD
  52
  53 WRITE:
  54   readonly: true
  55   permissions:
  56     - "indices:data/write*"
  57     - "indices:admin/mapping/put"
  58
  59 READ:
  60   readonly: true
  61   permissions:
  62     - "indices:data/read*"
  63     - "indices:admin/mappings/fields/get*"
  64
  65 DELETE:
  66   readonly: true
  67   permissions:
  68     - "indices:data/write/delete*"
  69
  70 CRUD:
  71   readonly: true
  72   permissions:
  73     - READ
  74     - WRITE
  75
  76 SEARCH:
  77   readonly: true
  78   permissions:
  79     - "indices:data/read/search*"
  80     - "indices:data/read/msearch*"
  81     - SUGGEST
  82
  83 SUGGEST:
  84   readonly: true
  85   permissions:
  86     - "indices:data/read/suggest*"
  87
  88 INDEX:
  89   readonly: true
  90   permissions:
  91     - "indices:data/write/index*"
  92     - "indices:data/write/update*"
  93     - "indices:admin/mapping/put"
  94     - "indices:data/write/bulk*"
  95
  96 GET:
  97   readonly: true
  98   permissions:
  99     - "indices:data/read/get*"
 100     - "indices:data/read/mget*"
 101
 102 ###### CLUSTER LEVEL ######
 103
 104 CLUSTER_ALL:
 105   readonly: true
 106   permissions:
 107     - "cluster:*"
 108
 109 CLUSTER_MONITOR:
 110   readonly: true
 111   permissions:
 112     - "cluster:monitor/*"
 113
 114 CLUSTER_COMPOSITE_OPS_RO:
 115   readonly: true
 116   permissions:
 117     - "indices:data/read/mget"
 118     - "indices:data/read/msearch"
 119     - "indices:data/read/mtv"
 120     - "indices:data/read/coordinate-msearch*"
 121     - "indices:admin/aliases/exists*"
 122     - "indices:admin/aliases/get*"
 123     - "indices:data/read/scroll"
 124
 125 CLUSTER_COMPOSITE_OPS:
 126   readonly: true
 127   permissions:
 128     - "indices:data/write/bulk"
 129     - "indices:admin/aliases*"
 130     - "indices:data/write/reindex"
 131     - CLUSTER_COMPOSITE_OPS_RO
 132
 133 MANAGE_SNAPSHOTS:
 134   readonly: true
 135   permissions:
 136     - "cluster:admin/snapshot/*"
 137     - "cluster:admin/repository/*"