[SUPPORT|kbn_ent] Installing the Elasticsearch plugin in Elastic Cloud

tris · January 5, 2023, 9:12am

Support request

ROR Version: 1.45

Kibana Version: 8.5.2

Elasticsearch Version: 8.5.2

** Feature Request **

Elastic Cloud supports plugins for elasticsearch only. But they do not support additional configuration files (e.g. readonlyrest.yml). Similar to how kibana supports inline configuration, can elasticsearch support inline configuration for RoR within the elasticsearch.yml?

{“customer_id”: “5ca76971-3031-4bfc-9f63-0a613bc10e46”, “subscription_id”: “50191917-634e-410a-b1e8-bc7063a5f5ff”}

sscarduzio · January 5, 2023, 10:09am

Interesting, in the early times, ROR only read its config from elasticsearch.yml.
@coutoPL do we still support reading from the main config file nowadays? I.e. as a fallback?

coutoPL · January 5, 2023, 7:31pm

No, it was years ago. We don’t maintain the legacy mechanism for at least 4 years.
But we could overcome the problem with little effort, but … ROR for 8.x needs ES patching. For sure it cannot be done with ES instance on Elastic Cloud.

sscarduzio · January 5, 2023, 8:10pm

true! Didn’t think about it. Any chance maybe to invoke the patching task from within the plugin runtime? The node would need a restart after that, but only once

coutoPL · January 5, 2023, 8:15pm

IMO - no chance. For them (Elastic) it’d be a security hole if they would allow doing such things.

coutoPL · January 5, 2023, 8:18pm

github.com

beshu-tech/readonlyrest-docs/blob/master/elasticsearch.md#3-patch-elasticsearch

# For Elasticsearch

## Overview: The ReadonlyREST Suite

ReadonlyREST is a light weight Elasticsearch plugin that adds encryption, authentication, authorization and access control capabilities to Elasticsearch embedded REST API. The core of this plugin is an ACL engine that checks each incoming request through a sequence of **rules** a bit like a firewall. There are a dozen rules that can be grouped in sequences of blocks and form a powerful representation of a logic chain.

The Elasticsearch plugin known as `ReadonlyREST Free` is released under the GPLv3 license, or alternatively, a commercial license \(see [ReadonlyREST Embedded](https://readonlyrest.com/embedded)\) and lays the technological foundations for the companion Kibana plugin which is released in two versions: [ReadonlyREST PRO](https://readonlyrest.com/pro) and [ReadonlyREST Enterprise](https://readonlyrest.com/enterprise).

Unlike the Elasticsearch plugin, the Kibana plugins are commercial only. But rely on the Elasticsearch plugin in order to work.

For a description of the Kibana plugins, skip to the [dedicated documentation page](kibana/) instead.

### ReadonlyREST Free plugin for Elasticsearch

In this document we are going to describe how to operate the Elasticsearch plugin in all its features. Once installed, this plugin will greatly extend the Elasticsearch HTTP API \(port 9200\), adding numerous extra capabilities:

* **Encryption**: transform the Elasticsearch API from HTTP to HTTPS
* **Authentication**: require credentials
* **Authorization**: declare groups of users, permissions and partial access to indices.
* **Access control**: complex logic can be modeled using an ACL \(access control list\) written in YAML.

This file has been truncated. show original