405 error with PUT on /_searchguard/api/sg_config

[brian]

7.7.1-42

I have enabled this setting in elasticsearch.yml
searchguard.unsupported.restapi.allow_sgconfig_modification: true

But when I try to PUT to /_searchguard/api/sg_config I get the following error:

{
  "error" : "Incorrect HTTP method for uri [/_searchguard/api/sg_config/?pretty=true] and method [PUT], allowed: [PATCH, GET]",
  "status" : 405
}

Is there another setting to enable this that I am missing?

[srgbnd]

Read the error message again. It says you use the HTTP PUT method. The PUT is not supported. The supported methods are PATCH and GET.

[brian]

The documentation:

Security for Elasticsearch | Authentication API | Search Guard

States that PUT / PATCH / GET are all supported. PUT / PATCH are disabled by default, but the config option below should enable both. However…it only enables PATCH and not PUT.

Since you can break the Search Guard authentication by uploading a faulty configuration, you need to explicitely enable the PUT endpoint by setting searchguard.unsupported.restapi.allow_sgconfig_modification: true in elasticsearch.yml

[srgbnd]

Then it is a bug either in docs or in the API endpoint. Did you try PATCH? Did it work?

[brian]

PATCH works through the CLI.

[srgbnd]

Thank you for reporting this bug.