48 lines
864 B
Django/Jinja
48 lines
864 B
Django/Jinja
# {{ ansible_managed | default('Managed by Ansible') }}
|
|
#
|
|
# OpenSearch Security — role mappings.
|
|
# Maps users and backend roles to OpenSearch roles defined in roles.yml.
|
|
---
|
|
_meta:
|
|
type: "rolesmapping"
|
|
config_version: 2
|
|
|
|
all_access:
|
|
reserved: false
|
|
users:
|
|
- "{{ opensearch_admin_username }}"
|
|
backend_roles:
|
|
- "admin"
|
|
description: "Maps admin to all_access"
|
|
|
|
own_index:
|
|
reserved: false
|
|
users:
|
|
- "*"
|
|
description: "Allow full access to an index named like the username"
|
|
|
|
logstash:
|
|
reserved: false
|
|
backend_roles:
|
|
- "logstash"
|
|
|
|
kibana_user:
|
|
reserved: false
|
|
backend_roles:
|
|
- "kibanauser"
|
|
description: "Maps kibanauser to kibana_user"
|
|
|
|
readall:
|
|
reserved: false
|
|
backend_roles:
|
|
- "readall"
|
|
|
|
manage_snapshots:
|
|
reserved: false
|
|
backend_roles:
|
|
- "snapshotrestore"
|
|
|
|
kibana_server:
|
|
reserved: true
|
|
users:
|
|
- "kibanaserver"
|