Using sgctl to create internal_users file

Search Guard
1

I’m trying to work on migrating an older version of searchguard into sg flx.

I noticed in trying to create the sg_internal_users.yml file that the new version no longer has the hash.sh option. Instead, there is the documentation Adding users | Security for Elasticsearch | Search Guard which says you can generate or update the users there.
But this sgctl tool doesn’t seem to allow you to also mark the user added as reserved:true
This Reserved resources | Security for Elasticsearch | Search Guard says we need to use sgctl to change reserved flag, but how is that done? do you have to manually edit the file and then upload the changed config?

2

You can either set the flag by manually editing the user.

Alternatively, it might be possible to use sgctl set:

sgctl.sh set internalusers your_user.reserved --true
3

This topic was automatically closed 21 days after the last reply. New replies are no longer allowed.