Cluster and indices priviliges

1

ROR Version: 1.59.0

Kibana Version: 8.14.3

Elasticsearch Version: 8.14.3

Steps to reproduce the issue I want to extract roles from an Elasticsearch cluster and import them into ReadonlyREST.

Expected result: Privileges should have the same format.

Actual Result: The privileges described in ReadonlyREST ( readonlyrest-docs/actionstrings/action_strings_es8.14.3.txt at master · beshu-tech/readonlyrest-docs · GitHub) are not mapped the same way as the privileges in Elasticsearch (Enterprise version).
For example:

image
image1206×256 22.6 KB

In your GitHub repository, there is no privilege called manage_index_template:
image

At the end, i need to automate the work, because i need to do some migration from elastic entreprise to elastic with readonlyrest entreprise version.

2

Hi @rafikkcmed

The actions you can find here are different from Elastic privileges.
What an action is, you can read here.

ROR doesn’t have a one-to-one equivalent for privileges.

3

Thank you for your response.
I’m using the Enterprise version, and I need to migrate approximately 25 clusters from Elastic Enterprise to Elastic with the ReadonlyREST (ROR) Enterprise version.

These clusters have different cluster and index privileges, and I need to automate the migration. I started by retrieving the IAM-related components, such as roles, role mappings, and users, while ensuring that privileges remain the same.

Is it possible to achieve this with ROR, or do I need to manually extract and import these roles one by one?
Thank you in advance.

4

Sadly, currently, we don’t have any tool to do the migration automatically.
But it seems it’s a great idea to implement something like that. I will add it to our backlog