Searchgurad implementation

[cstaley]

You always can use curl with the same certificates you use for sgadmin to allow any operation. Should then look like curl -Ss https://eshost:9200/<api> --cert /path/to/admincert.pem --key /path/to/adminkey.pem --cacert /path/to/root-ca.pem

More on that:

Failed to create new users and roles

The easiest way to get complete access over the cluster, including the internal searchguard configuration index is to use the admin certificate. This is the one that you use when executing sgadmin. You can for example use curl with the admin certificate like: curl -k \ --cert "/path/to/admin-cert.pem" \ --key "/path/to/admin-key.pem" \ -XPUT "https://sgssl-0.example.com:9200/_all/_settings" \ -H 'Content-Type: application/json' \ -d '{ "index.blocks.read_only_allow_delete": null }' (…

https://github.com/floragunncom/search-guard/issues/701#issuecomment-496796656