Elasticsearch 的 RBAC 账号角色权限管理 (xpack)

创建角色声明其拥有的权限

POST _security/role/events_admin            # _security/role/<ROLE_NAME>
{
    "indices" : [
        {
            "names" : [ "events*" ],        # 索引名
            "privileges" : [ "all" ]        # 权限
        },
        {
            "names" : [ ".kibana*" ], 
            "privileges" : [ "manage", "read", "index" ]
        }
    ]
}

创建用户并与角色进行关联

POST _security/user/<USERNAME>              # _security/user/<USERNAME>
{
    "password" : "<PASSWORD>",
    "full_name" : "John Doe",
    "email" : "wy@example.com",
    "roles" : [ "events_admin" ]
}'

重置用户密码

PUT /_xpack/security/user/<USERNAME>/_password
{
  "password" : "elastic123"
}

查询、禁用、启用、删除用户

GET /_xpack/security/user                       # 查询所有用户
GET /_xpack/security/user/<username>            # 查询特定用户
GET /_xpack/security/user/my_user,ctr           # 查询多个用户

PUT /_xpack/security/user/<username>/_disable   # 禁用用户
PUT /_xpack/security/user/<username>/_enable    # 启用用户

DELETE /_xpack/security/user/<username>         # 删除用户

GET _xpack/security/user/_has_privileges        # 查看当前用户权限
# {
#   "cluster": [ "monitor", "manage" ],
#   "index" : [
#     {
#       "names": [ "suppliers", "products" ],
#       "privileges": [ "read" ]
#     },
#     {
#       "names": [ "inventory" ],
#       "privileges" : [ "read", "write" ]
#     }
#   ]
# }