no permissions for [cluster:monitor/main]

[jkressin]

Can you please post your Search Guard config files?

[viveksinghggits]

I have uploaded all the files here, but I would just like to highlight once again that

everything works if I install elastic search 6.7.2 and respective search guard plugin drectly on my ubuntu machine and not on docker.

If you want to look at the Dockerfile I have mentioned the github repo in my previous comment, the one in 6.7 branch.
Thanks for helping me out with this.

sg_roles_mapping.yml (548 Bytes) sg_roles.yml (7.0 KB) sg_config.yml (11.2 KB) sg_action_groups.yml (2.3 KB) elasticsearch.yml.example (9.3 KB) sg_internal_users.yml (407 Bytes)

[viveksinghggits]

So, I somehow got elastic search version 6.5.1 working with the respective search guard version i.e. com.floragunn:search-guard-6:6.5.1-24.3.
But now the issue that I have is I think I can not provide the password as environment variable while running docker image if elastic search is being run as docker image. Because that functionality is available after search guard version 25 as mentioned here in this thread.

How to pass pass username and password as env variable when search-gaurd is securing the ES cluster that is running as docker image

If you are running SG version 25.0 or above, you can use environment variables in the Search Guard configuration files. For example, if the password hash for your admin user is stored in an environment variable called ADMIN_PWD_HASH you can use it like: admin: hash: ${env.ADMIN_PWD_HASH} If your cleartext password is stored in an environment variable called ADMIN_PWD, SG can automatically convert it to a hash when replacing the variables, like: admin: hash: ${envbc.ADMIN_PWD}

Is there a way to achieve the same in this version of search-guard or its not possible to do in versions below that 25.

So, here is the problem now if i run elastic search version less than 6.6, respective search guard version would be less than 25 and providing the password while running docker images wont be possible and if I run elastic search version 6.6 or 6.7 and respective search guard plugin I get issue that is mentioned here

no permissions for [cluster:monitor/main]

so, I am using elastic’s official elastic search image to run elastcsearch version 6.7.2 and installing search guard plugin version com.floragunn:search-guard-6:6.7.2-25.1 in the Dockerfile. Now the very same thing works when I tried it all with elasticsearch version 7.0.1 but getting below error If I run that docker image which runs the version 6.7.2 Dockerfile can be found at { "error": { "root_cause": [ { "type": "security_exception", "reason": "no permissions for [cluster:monitor/main] …