Allow elasticsearch to handle different auth for read from vs write to index

Bug #1730530 reported by Robert Lyon on 2017-11-06
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Mahara
Wishlist
Robert Lyon
17.10
Wishlist
Unassigned
18.04
Wishlist
Robert Lyon

Bug Description

If you are using an elasticsearch plugin like Search Guard or being safe in general you might want to have separate auth for writing to your index vs searching/reading from it.

To handle this we will need to allow the options for saving this other user/password pair

Reviewed: https://reviews.mahara.org/8261
Committed: https://git.mahara.org/mahara/mahara/commit/fa4b44eab830a237f213dc9993544f55ebb69bea
Submitter: Robert Lyon (<email address hidden>)
Branch: master

commit fa4b44eab830a237f213dc9993544f55ebb69bea
Author: Robert Lyon <email address hidden>
Date: Tue Nov 7 12:49:31 2017 +1300

Bug 1730530: Elasticsearch use different auths for reading from/writing to index

This way we can make the elasticsearch safer so that only mahara site
admins can access the index in write mode.

Also adjust how we pass the $hosts configuration to the client builder

behatnotneeded

Change-Id: I30218473ee6b87346783462d30ab627dce985338
Signed-off-by: Robert Lyon <email address hidden>

Robert Lyon (robertl-9) on 2018-02-01
Changed in mahara:
status: In Progress → Fix Committed

Reviewed: https://reviews.mahara.org/8506
Committed: https://git.mahara.org/mahara/mahara/commit/4ea8ee0ddae228c9eac63a48fa44b3a83f66280d
Submitter: Robert Lyon (<email address hidden>)
Branch: 17.10_STABLE

commit 4ea8ee0ddae228c9eac63a48fa44b3a83f66280d
Author: Robert Lyon <email address hidden>
Date: Tue Nov 7 12:49:31 2017 +1300

Bug 1730530: Elasticsearch use different auths for reading from/writing to index

This way we can make the elasticsearch safer so that only mahara site
admins can access the index in write mode.

Also adjust how we pass the $hosts configuration to the client builder

behatnotneeded

Change-Id: I30218473ee6b87346783462d30ab627dce985338
Signed-off-by: Robert Lyon <email address hidden>
(cherry picked from commit fa4b44eab830a237f213dc9993544f55ebb69bea)

To post a comment you must log in.
This report contains Public information  Edit
Everyone can see this information.

Other bug subscribers