aboutsummaryrefslogtreecommitdiffstats
path: root/charts/aai-elasticsearch/resources/config/sg/sg_roles_mapping.yml
diff options
context:
space:
mode:
authorJessica Wagantall <jwagantall@linuxfoundation.org>2019-04-22 11:57:18 -0700
committerJessica Wagantall <jwagantall@linuxfoundation.org>2019-04-22 11:58:36 -0700
commit9b34a8a4d357fc5a03875f99244f48bdd8b2d03e (patch)
treedbabc5e56188f200913bcefb75424febaabe9952 /charts/aai-elasticsearch/resources/config/sg/sg_roles_mapping.yml
parent9a427329607433c038f9a8fec8d866f354881234 (diff)
parent201670e70e53a3a9b7e2e8536e8e6719a8ebbab8 (diff)
OOM code transfer for AAI
Transfer code from oom/kubernetes/aai into the aai/oom tech team repo. Change-Id: I7bcd43ff9acbc12ae36c95e3ebcee567fb7572cf Issue-ID: CIMAN-250 Signed-off-by: Jessica Wagantall <jwagantall@linuxfoundation.org>
Diffstat (limited to 'charts/aai-elasticsearch/resources/config/sg/sg_roles_mapping.yml')
-rw-r--r--charts/aai-elasticsearch/resources/config/sg/sg_roles_mapping.yml38
1 files changed, 38 insertions, 0 deletions
diff --git a/charts/aai-elasticsearch/resources/config/sg/sg_roles_mapping.yml b/charts/aai-elasticsearch/resources/config/sg/sg_roles_mapping.yml
new file mode 100644
index 0000000..970e027
--- /dev/null
+++ b/charts/aai-elasticsearch/resources/config/sg/sg_roles_mapping.yml
@@ -0,0 +1,38 @@
+# In this file users, backendroles and hosts can be mapped to Search Guard roles.
+# Permissions for Search Guard roles are configured in sg_roles.yml
+
+sg_all_access:
+ readonly: true
+ backendroles:
+ - admin
+
+sg_logstash:
+ backendroles:
+ - logstash
+
+sg_kibana_server:
+ readonly: true
+ users:
+ - kibanaserver
+
+sg_kibana_user:
+ backendroles:
+ - kibanauser
+
+sg_readall:
+ readonly: true
+ backendroles:
+ - readall
+
+sg_manage_snapshots:
+ readonly: true
+ backendroles:
+ - snapshotrestore
+
+sg_own_index:
+ users:
+ - '*'
+
+sg_role_test:
+ users:
+ - test