Skip to content
This repository has been archived by the owner on Jan 23, 2024. It is now read-only.

Create opbeans_user/role with write/read access for the opbeans-python #1063

Merged
merged 5 commits into from
Feb 22, 2021

Conversation

v1v
Copy link
Member

@v1v v1v commented Feb 19, 2021

What does this PR do?

  • Create opbeans role and opbeans_user with write/read access in Elasticsearch
  • Default password: changeme
  • Create OPBEANS_USER and OPBEANS_PASS environment variables.
  • Expose those env variables for the opbeans-python container

Related issues

Closes #1032

Test

UI

image

$ hub pr checkout 1063
$ scripts/compose.py start master --with-opbeans-python
$ docker exec -ti localtesting_latest_opbeans-python env | grep OPBEANS
OPBEANS_USER=opbeans_user
OPBEANS_PASS=changeme
OPBEANS_SERVER_URL=http://opbeans-python:3000
OPBEANS_DT_PROBABILITY=0.50
OPBEANS_SERVICES=opbeans-python

@@ -6,3 +6,4 @@ filebeat_user:$2a$10$sFxIEX8tKyOYgsbJLbUhTup76ssvSD3L4T0H6Raaxg4ewuNr.lUFC
heartbeat_user:$2a$10$nKUGDr/V5ClfliglJhfy8.oEkjrDtklGQfhd9r9NoFqQeoNxr7uUK
kibana_system_user:$2a$10$nN6sRtQl2KX9Gn8kV/.NpOLSk6Jwn8TehEDnZ7aaAgzyl/dy5PYzW
metricbeat_user:$2a$10$5PyTd121U2ZXnFk9NyqxPuLxdptKbB8nK5egt6M5/4xrKUkk.GReG
opbeans_user:$2a$10$iTy29qZaCSVn4FXlIjertuO8YfYVLCbvoUAJ3idaXfLRclg9GXdGG
Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Theoritically this hash is similar to the apm_server_user, so it should match changeme ideally.

I'm just guessing here

@apmmachine
Copy link
Collaborator

apmmachine commented Feb 19, 2021

💚 Build Succeeded

the below badges are clickable and redirect to their specific view in the CI or DOCS
Pipeline View Test View Changes Artifacts preview

Expand to view the summary

Build stats

  • Build Cause: Started by timer

  • Start Time: 2021-02-22T04:00:00.694+0000

  • Duration: 40 min 45 sec

  • Commit: 7e32ef8

Test stats 🧪

Test Results
Failed 0
Passed 488
Skipped 1
Total 489

Trends 🧪

Image of Build Times

Image of Tests

@v1v v1v requested review from beniwohli and a team February 19, 2021 14:02
@v1v v1v marked this pull request as ready for review February 19, 2021 14:02
@v1v v1v self-assigned this Feb 19, 2021
@kuisathaverat
Copy link
Contributor

Do we need the same user in the clusters?

@beniwohli
Copy link
Contributor

@kuisathaverat we'll use those credentials to make some ES queries from the opbeans-python app, so if there is an opbeans-python instance that interacts with the clusters, we'd need it there too

@v1v
Copy link
Member Author

v1v commented Feb 19, 2021

I'll add them now

@v1v v1v merged commit 031e2c4 into elastic:master Feb 22, 2021
@v1v v1v deleted the feature/user-opbeans branch February 22, 2021 09:10
v1v added a commit to v1v/apm-integration-testing that referenced this pull request Feb 22, 2021
v1v added a commit to v1v/apm-integration-testing that referenced this pull request Mar 29, 2021
…rt-from-build

* upstream/master: (24 commits)
  Add mergify (elastic#1089)
  fix: update flake8 and deps to work with Python 3.8+ (elastic#1085)
  chore: bump elastic stack (elastic#1087)
  fix: force to activate venv (elastic#1086)
  fix: --opbeans-node-agent-local-repo=/a/local/dir (elastic#1084)
  ci: jjbb remove periodic-folder-trigger (elastic#1079)
  Fix APM Server managed by Elastic Agent setup (elastic#1078)
  docker/opbeans/go: use -mod=mod (elastic#1077)
  [fleet] fix elastic-agent setup (elastic#1076)
  update supported stack versions (elastic#1075)
  [CI] Increase timeout (elastic#1070)
  Add --package-registry-url flag (elastic#1069)
  Create opbeans_user/role with write/read access for the opbeans-python (elastic#1063)
  reset postgres sequences after database migration (elastic#1062)
  chore: bump Elastic Stack (elastic#1060)
  docker/go/nethttp: go build -mod=mod (elastic#1061)
  check agent liveness via version subcommand (elastic#1059)
  test: use filebeat step to grab Docker logs (elastic#1029)
  Update dotnet sdk 5.0 docker image (elastic#1048)
  docs: using Dyno (elastic#1056)
  ...
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

user role for opbeans to read/write directly to elasticsearch
5 participants