Including protected searchguard security & signal indices in snapshots when TLS on REST layer is disabled

Signals Alerting
3

Hi. We have an option to allow creating and restoring snapshots while REST layer TLS is disabled.

Make sure you have the following configuration options. The elasticsearch user must have RW permissions for “/path/to/snapshots”.
elasticsearch.yml

searchguard.ssl.http.enabled: false
searchguard.unsupported.restore.sgindex.enabled: true
searchguard.enable_snapshot_restore_privilege: true
path.repo: ["/path/to/snaphots"]

Register a snapshot repository.

curl -k \
 -u admin:admin \
 -X PUT "localhost:9200/_snapshot/my_backup?pretty" \
 -H 'Content-Type: application/json' \
 -d'
 {
  "type": "fs",
  "settings": {
   "location": "my_backup_location",
   "compress": true
  }
 }
 '

Create a snapshot.

curl -k \
 -u admin:admin \
 -X PUT "localhost:9200/_snapshot/my_backup/snapshot_1?wait_for_completion=true"

Restore the snapshot.

curl -k \
 -u admin:admin \
 -X POST "localhost:9200/_snapshot/my_backup/snapshot_1/_restore" \
 -H 'Content-Type: application/json' \
 -d '
  {
   "ignore_unavailable": true
  }
 '