Commit 9b6795bc authored by Pedro Eduardo Trujillo's avatar Pedro Eduardo Trujillo
Browse files

Sobreescribe mapeo de roles, configura anónimo

parent b2b20dd5

deploy/config/sg_roles_mapping.yml

0 → 100644
+35 −0
Original line number Diff line number Diff line 
# In this file users, backendroles and hosts can be mapped to Search Guard roles.

# Permissions for Search Guard roles are configured in sg_roles.yml



sg_all_access:

  readonly: true

  backendroles:

    - admin



sg_logstash:

  backendroles:

    - logstash



sg_kibana_server:

  readonly: true

  users:

    - kibanaserver



sg_kibana_user:

  backendroles:

    - kibanauser

    - sg_anonymous_backendrole



sg_readall:

  readonly: true

  backendroles:

    - readall



sg_manage_snapshots:

  readonly: true

  backendroles:

    - snapshotrestore



sg_own_index:

  users:

    - '*'
 
 No newline at end of file

deploy/docker-compose.es6-1.tmpl.yml

+9 −0
Original line number Diff line number Diff line
@@ -84,6 +84,11 @@ services: 
        mode: 0600

        uid: '1000'

        gid: '1000'

      - source: sg-roles-mapping

        target: /usr/share/elasticsearch/plugins/search-guard-6/sgconfig/sg_roles_mapping.yml

        mode: 0600

        uid: '1000'

        gid: '1000'

    deploy:

      mode: replicated

      replicas: 1
@@ -149,3 +154,7 @@ configs: 
  sg-config:

    name: ${SG_CONFIG_NAME:-sg-config}

    file: ./config/sg_config.yml



  sg-roles-mapping:

    name: ${SG_ROLES_MAPPING_NAME:-sg-roles-mapping}

    file: ./config/sg_roles_mapping.yml

deploy/config/sg_config.yml

+19 −19

File changed.

Contains only whitespace changes.