Skip to content
This repository has been archived by the owner on Jan 23, 2024. It is now read-only.

Create opbeans_user/role with write/read access for the opbeans-python #1063

Merged
merged 5 commits into from
Feb 22, 2021
Merged

Create opbeans_user/role with write/read access for the opbeans-python #1063

Show file tree
Hide file tree
Changes from 1 commit
Commits
Show all changes
5 commits
Select commit Hold shift + click to select a range
65b0317
Create opbeans_user/role with write/read access for the opbeans-python
v1v Feb 19, 2021
6316383
Fix tests
v1v Feb 19, 2021
d2c2746
Use only privileges to the index
v1v Feb 19, 2021
092c982
Add cluster permissions
v1v Feb 19, 2021
7e32ef8
Revert "Add cluster permissions"
v1v Feb 19, 2021
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
5 changes: 5 additions & 0 deletions docker/elasticsearch/roles.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -28,3 +28,8 @@ metricbeat:
indices:
- names: ['metricbeat-*', 'shrink-metricbeat-*']
privileges: ['all']
opbeans:
cluster: ['manage_index_templates', 'monitor', 'manage_ingest_pipelines', 'manage_ilm']
indices:
- names: ['opbeans-*']
privileges: ['write', 'manage']
1 change: 1 addition & 0 deletions docker/elasticsearch/users
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -6,3 +6,4 @@ filebeat_user:$2a$10$sFxIEX8tKyOYgsbJLbUhTup76ssvSD3L4T0H6Raaxg4ewuNr.lUFC
heartbeat_user:$2a$10$nKUGDr/V5ClfliglJhfy8.oEkjrDtklGQfhd9r9NoFqQeoNxr7uUK
kibana_system_user:$2a$10$nN6sRtQl2KX9Gn8kV/.NpOLSk6Jwn8TehEDnZ7aaAgzyl/dy5PYzW
metricbeat_user:$2a$10$5PyTd121U2ZXnFk9NyqxPuLxdptKbB8nK5egt6M5/4xrKUkk.GReG
opbeans_user:$2a$10$iTy29qZaCSVn4FXlIjertuO8YfYVLCbvoUAJ3idaXfLRclg9GXdGG
Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Theoritically this hash is similar to the apm_server_user, so it should match changeme ideally.

I'm just guessing here

1 change: 1 addition & 0 deletions docker/elasticsearch/users_roles
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -9,4 +9,5 @@ ingest_admin:apm_server_user
kibana_system:kibana_system_user
kibana_user:apm_server_user,apm_user_ro,beats_user,filebeat_user,heartbeat_user,metricbeat_user
metricbeat:metricbeat_user
opbeans:opbeans_user
superuser:admin
2 changes: 2 additions & 0 deletions scripts/modules/opbeans.py
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -522,6 +522,8 @@ def _content(self):
"ELASTIC_APM_SOURCE_LINES_SPAN_LIBRARY_FRAMES",
"REDIS_URL=redis://redis:6379",
"ELASTICSEARCH_URL={}".format(self.es_urls),
"OPBEANS_USER=opbeans_user",
"OPBEANS_PASS=changeme",
"OPBEANS_SERVER_URL=http://opbeans-python:{}".format(self.APPLICATION_PORT),
"PYTHON_AGENT_BRANCH=" + self.agent_branch,
"PYTHON_AGENT_REPO=" + self.agent_repo,
Expand Down
3 changes: 2 additions & 1 deletion scripts/tests/localsetup_tests.py
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -355,7 +355,8 @@ def test_opbeans_python(self):
- ELASTIC_APM_SOURCE_LINES_SPAN_LIBRARY_FRAMES
- REDIS_URL=redis://redis:6379
- ELASTICSEARCH_URL=http://elasticsearch:9200
- OPBEANS_SERVER_URL=http://opbeans-python:3000
- OPBEANS_USER=opbeans_user
- OPBEANS_PASS=changeme
- PYTHON_AGENT_BRANCH=
- PYTHON_AGENT_REPO=
- PYTHON_AGENT_VERSION
Expand Down