in pkg/controller/elasticsearch/user/roles.go [259:331]
func init() {
for beat := range beatv1beta1.KnownTypes {
PredefinedRoles[BeatEsRoleName(V77, beat)] = esclient.Role{
Cluster: []string{"monitor", "manage_ilm", "manage_ml", "read_ilm", "cluster:admin/ingest/pipeline/get"},
Indices: []esclient.IndexRole{
{
Names: append([]string{fmt.Sprintf("%s-*", beat)}, BeatsAdditionalPermissions[beat]),
Privileges: []string{"manage", "read", "create_doc", "view_index_metadata", "create_index"},
},
},
}
PredefinedRoles[BeatEsRoleName(V75, beat)] = esclient.Role{
Cluster: []string{"monitor", "manage_ilm", "manage_ml", "read_ilm", "cluster:admin/ingest/pipeline/get"},
Indices: []esclient.IndexRole{
{
Names: append([]string{fmt.Sprintf("%s-*", beat)}, BeatsAdditionalPermissions[beat]),
Privileges: []string{"manage", "read", "create_doc", "view_index_metadata", "create_index"},
},
},
}
PredefinedRoles[BeatEsRoleName(V73, beat)] = esclient.Role{
Cluster: []string{"monitor", "manage_ilm", "manage_ml", "read_ilm", "manage_pipeline"},
Indices: []esclient.IndexRole{
{
Names: append([]string{fmt.Sprintf("%s-*", beat)}, BeatsAdditionalPermissions[beat]),
Privileges: []string{"manage", "read", "index", "view_index_metadata", "create_index"},
},
},
}
PredefinedRoles[BeatEsRoleName(V70, beat)] = esclient.Role{
Cluster: []string{"manage_index_templates", "monitor", "manage_ilm", "manage_ml", "manage_pipeline"},
Indices: []esclient.IndexRole{
{
Names: append([]string{fmt.Sprintf("%s-*", beat)}, BeatsAdditionalPermissions[beat]),
Privileges: []string{"manage", "read", "index", "create_index"},
},
},
}
PredefinedRoles[BeatKibanaRoleName(V77, beat)] = esclient.Role{
Cluster: []string{"monitor", "manage_ilm", "manage_ml"},
Indices: []esclient.IndexRole{
{
Names: append([]string{fmt.Sprintf("%s-*", beat)}, BeatsAdditionalPermissions[beat]),
Privileges: []string{"manage", "read"},
},
},
}
PredefinedRoles[BeatKibanaRoleName(V73, beat)] = esclient.Role{
Cluster: []string{"monitor", "manage_ilm", "manage_ml"},
Indices: []esclient.IndexRole{
{
Names: append([]string{fmt.Sprintf("%s-*", beat)}, BeatsAdditionalPermissions[beat]),
Privileges: []string{"manage", "read"},
},
},
}
PredefinedRoles[BeatKibanaRoleName(V70, beat)] = esclient.Role{
Cluster: []string{"manage_index_templates", "monitor", "manage_ilm", "manage_ml"},
Indices: []esclient.IndexRole{
{
Names: append([]string{fmt.Sprintf("%s-*", beat)}, BeatsAdditionalPermissions[beat]),
Privileges: []string{"manage", "read"},
},
},
}
}
}