Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Backport 2.8] Rest admin permissions (#2411) #2807

Merged

Commits on May 29, 2023

  1. role.yml changes for lron feature (opensearch-project#2789) (opensear…

    …ch-project#2792)
    
    Signed-off-by: zhichao-aws <zhichaog@amazon.com>
    (cherry picked from commit a580dfc)
    
    Co-authored-by: zhichao-aws <zhichaog@amazon.com>
    opensearch-trigger-bot[bot] and zhichao-aws committed May 29, 2023
    Configuration menu
    Copy the full SHA
    a70cf42 View commit details
    Browse the repository at this point in the history
  2. add ml model group system index (opensearch-project#2790) (opensearch…

    …-project#2797)
    
    Signed-off-by: Yaliang Wu <ylwu@amazon.com>
    (cherry picked from commit 1bb2ef1)
    
    Co-authored-by: Yaliang Wu <ylwu@amazon.com>
    opensearch-trigger-bot[bot] and ylwu-amzn committed May 29, 2023
    Configuration menu
    Copy the full SHA
    279c4d9 View commit details
    Browse the repository at this point in the history

Commits on May 30, 2023

  1. Rest admin permissions (opensearch-project#2411)

    Permissions for REST admin user
    
    Added granular permissions for all REST API actions in OpenSearch to be individually assigned.
    
    Permissions are:
        - 'restapi:admin/actiongroups' - allow full access to actiongroups
        - 'restapi:admin/allowlist' - allow full access to allowlist
        - 'restapi:admin/internalusers'- allow full access to internalusers
        - 'restapi:admin/nodesdn'- allow full access to nodesdn
        - 'restapi:admin/roles' - allow full access to roles
        - 'restapi:admin/rolesmapping' - allow full access to roles mappings
        - 'restapi:admin/ssl/certs/info' - allow full access to certs info
        - 'restapi:admin/ssl/certs/reload' - allow full access to certs reload
        - 'restapi:admin/tenants' - allow full access to tenants
    
    Adds tests for these permissions.
    
    Signed-off-by: Andrey Pleskach <ples@aiven.io>
    (cherry picked from commit d676716)
    willyborankin authored and DarshitChanpura committed May 30, 2023
    Configuration menu
    Copy the full SHA
    a1fd0ff View commit details
    Browse the repository at this point in the history
  2. Fixes CI errors

    Signed-off-by: Darshit Chanpura <dchanp@amazon.com>
    DarshitChanpura committed May 30, 2023
    Configuration menu
    Copy the full SHA
    0813f78 View commit details
    Browse the repository at this point in the history
  3. Fixes HTTP5 imports

    Signed-off-by: Darshit Chanpura <dchanp@amazon.com>
    DarshitChanpura committed May 30, 2023
    Configuration menu
    Copy the full SHA
    cade19f View commit details
    Browse the repository at this point in the history
  4. Fixes password related changes in tests

    Signed-off-by: Darshit Chanpura <dchanp@amazon.com>
    DarshitChanpura committed May 30, 2023
    Configuration menu
    Copy the full SHA
    1da6f70 View commit details
    Browse the repository at this point in the history
  5. Update ActionGroupsApiTest.java

    Remove unused import
    stephen-crawford committed May 30, 2023
    Configuration menu
    Copy the full SHA
    56f9d02 View commit details
    Browse the repository at this point in the history
  6. Incorporates jar hell fix

    Signed-off-by: Darshit Chanpura <dchanp@amazon.com>
    DarshitChanpura committed May 30, 2023
    Configuration menu
    Copy the full SHA
    5b2b3c1 View commit details
    Browse the repository at this point in the history