Add required ml permissions to support new roles (#1838)

* Add required ml permissions to support new roles

Signed-off-by: Sicheng Song <[email protected]>

* Add ml permissions

Signed-off-by: Sicheng Song <[email protected]>

* Remove internal ml action permissions

Signed-off-by: Sicheng Song <[email protected]>

* Add back internal ml action permissions

Signed-off-by: Sicheng Song <[email protected]>

---------

Signed-off-by: Sicheng Song <[email protected]>

public/apps/configuration/constants.tsx

@@ -145,24 +145,64 @@ export const CLUSTER_PERMISSIONS: string[] = [
   'cluster:admin/opensearch/ql/async_query/result',
   'cluster:admin/opensearch/ql/async_query/delete',
   'cluster:admin/opensearch/ppl',
+  'cluster:admin/opensearch/ml/agents/delete',
+  'cluster:admin/opensearch/ml/agents/get',
+  'cluster:admin/opensearch/ml/agents/register',
+  'cluster:admin/opensearch/ml/agents/search',
+  'cluster:admin/opensearch/ml/config/get',
+  'cluster:admin/opensearch/ml/create_connector',
+  'cluster:admin/opensearch/ml/connectors/get',
+  'cluster:admin/opensearch/ml/connectors/search',
+  'cluster:admin/opensearch/ml/connectors/update',
+  'cluster:admin/opensearch/ml/controllers/create',
+  'cluster:admin/opensearch/ml/controllers/delete',
+  'cluster:admin/opensearch/ml/controllers/deploy',
+  'cluster:admin/opensearch/ml/controllers/get',
+  'cluster:admin/opensearch/ml/controllers/undeploy',
+  'cluster:admin/opensearch/ml/controllers/update',
   'cluster:admin/opensearch/ml/create_model_meta',
   'cluster:admin/opensearch/ml/execute',
-  'cluster:admin/opensearch/ml/load_model',
-  'cluster:admin/opensearch/ml/load_model_on_nodes',
+  'cluster:admin/opensearch/ml/deploy_model',
+  'cluster:admin/opensearch/ml/deploy_model_on_nodes',
+  'cluster:admin/opensearch/ml/memory/conversation/get',
+  'cluster:admin/opensearch/ml/memory/conversation/interaction/search',
+  'cluster:admin/opensearch/ml/memory/conversation/delete',
+  'cluster:admin/opensearch/ml/memory/conversation/list',
+  'cluster:admin/opensearch/ml/memory/conversation/search',
+  'cluster:admin/opensearch/ml/memory/conversation/create',
+  'cluster:admin/opensearch/ml/memory/conversation/update',
+  'cluster:admin/opensearch/ml/memory/interaction/create',
+  'cluster:admin/opensearch/ml/memory/interaction/update',
+  'cluster:admin/opensearch/ml/memory/interaction/get',
+  'cluster:admin/opensearch/ml/memory/interaction/list',
+  'cluster:admin/opensearch/ml/memory/trace/get',
+  'cluster:admin/opensearch/ml/model_groups/delete',
+  'cluster:admin/opensearch/ml/model_groups/get',
+  'cluster:admin/opensearch/ml/model_groups/search',
+  'cluster:admin/opensearch/ml/register_model_group',
+  'cluster:admin/opensearch/ml/update_model_group',
   'cluster:admin/opensearch/ml/models/delete',
   'cluster:admin/opensearch/ml/models/get',
   'cluster:admin/opensearch/ml/models/search',
+  'cluster:admin/opensearch/ml/models/update',
+  'cluster:admin/opensearch/ml/models/update_cache',
   'cluster:admin/opensearch/ml/predict',
   'cluster:admin/opensearch/ml/profile/nodes',
+  'cluster:admin/opensearch/ml/register_model',
+  'cluster:admin/opensearch/ml/register_model_meta',
   'cluster:admin/opensearch/ml/stats/nodes',
   'cluster:admin/opensearch/ml/tasks/delete',
   'cluster:admin/opensearch/ml/tasks/get',
   'cluster:admin/opensearch/ml/tasks/search',
+  'cluster:admin/opensearch/ml/tools/get',
+  'cluster:admin/opensearch/ml/tools/list',
   'cluster:admin/opensearch/ml/train',
   'cluster:admin/opensearch/ml/trainAndPredict',
-  'cluster:admin/opensearch/ml/unload_model',
+  'cluster:admin/opensearch/ml/undeploy_model',
+  'cluster:admin/opensearch/ml/undeploy_models',
   'cluster:admin/opensearch/ml/upload_model',
   'cluster:admin/opensearch/ml/upload_model_chunk',
+  'cluster:admin/opensearch/mlinternal/forward',
   'cluster:admin/opensearch/observability/create',
   'cluster:admin/opensearch/observability/delete',
   'cluster:admin/opensearch/observability/get',