Mahara

Allow elasticsearch to handle different auth for read from vs write to index

Bug #1730530 reported by Robert Lyon
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Mahara
Fix Released
Wishlist
Robert Lyon
Mahara 18.04.0
17.10
Fix Released
Wishlist
Unassigned
Mahara 17.10.4
18.04
Fix Released
Wishlist
Robert Lyon
Mahara 18.04.0

Bug Description

If you are using an elasticsearch plugin like Search Guard or being safe in general you might want to have separate auth for writing to your index vs searching/reading from it.

To handle this we will need to allow the options for saving this other user/password pair

Revision history for this message
Mahara Bot (dev-mahara) wrote : A patch has been submitted for review

Patch for "master" branch: https://reviews.mahara.org/8261

Revision history for this message
Mahara Bot (dev-mahara) wrote : A change has been merged

Reviewed: https://reviews.mahara.org/8261
Committed: https://git.mahara.org/mahara/mahara/commit/fa4b44eab830a237f213dc9993544f55ebb69bea
Submitter: Robert Lyon (<email address hidden>)
Branch: master

commit fa4b44eab830a237f213dc9993544f55ebb69bea
Author: Robert Lyon <email address hidden>
Date: Tue Nov 7 12:49:31 2017 +1300

Bug 1730530: Elasticsearch use different auths for reading from/writing to index

This way we can make the elasticsearch safer so that only mahara site
admins can access the index in write mode.

Also adjust how we pass the $hosts configuration to the client builder

behatnotneeded

Change-Id: I30218473ee6b87346783462d30ab627dce985338
Signed-off-by: Robert Lyon <email address hidden>

Robert Lyon (robertl-9)
Changed in mahara:
status: In Progress → Fix Committed
Revision history for this message
Mahara Bot (dev-mahara) wrote : A patch has been submitted for review

Patch for "17.10_STABLE" branch: https://reviews.mahara.org/8506

Revision history for this message
Mahara Bot (dev-mahara) wrote : A change has been merged

Reviewed: https://reviews.mahara.org/8506
Committed: https://git.mahara.org/mahara/mahara/commit/4ea8ee0ddae228c9eac63a48fa44b3a83f66280d
Submitter: Robert Lyon (<email address hidden>)
Branch: 17.10_STABLE

commit 4ea8ee0ddae228c9eac63a48fa44b3a83f66280d
Author: Robert Lyon <email address hidden>
Date: Tue Nov 7 12:49:31 2017 +1300

Bug 1730530: Elasticsearch use different auths for reading from/writing to index

This way we can make the elasticsearch safer so that only mahara site
admins can access the index in write mode.

Also adjust how we pass the $hosts configuration to the client builder

behatnotneeded

Change-Id: I30218473ee6b87346783462d30ab627dce985338
Signed-off-by: Robert Lyon <email address hidden>
(cherry picked from commit fa4b44eab830a237f213dc9993544f55ebb69bea)

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.
Subscribing...

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.