mirror of
https://github.com/elastic/elasticsearch.git
synced 2025-04-25 07:37:19 -04:00
13c8ee1015
This change introduces a CLI tool that can be used to create enrollment tokens. It doesn't require credentials, but simply write access to the local filesystem of a node. It uses an auto-generated user in the file-realm with superuser role. For this purpose, this change also introduces a base class for a CLI tool that can be used by any CLI tool needs to perform actions against an ES node as a superuser without requiring credentials from the user. It is worth noting that this doesn't change our existing thread model, because already an actor with write access to the fs of an ES node, can become superuser (again, by adding a superuser to the file realm, albeit manually).
37 lines
863 B
Text
37 lines
863 B
Text
[[commands]]
|
|
= Command line tools
|
|
|
|
[partintro]
|
|
--
|
|
|
|
{es} provides the following tools for configuring security and performing other
|
|
tasks from the command line:
|
|
|
|
* <<certgen>>
|
|
* <<certutil>>
|
|
* <<create-enrollment-token>>
|
|
* <<elasticsearch-croneval>>
|
|
* <<elasticsearch-keystore>>
|
|
* <<node-tool>>
|
|
* <<reset-elastic-password>>
|
|
* <<saml-metadata>>
|
|
* <<setup-passwords>>
|
|
* <<shard-tool>>
|
|
* <<syskeygen>>
|
|
* <<users-command>>
|
|
|
|
--
|
|
|
|
include::certgen.asciidoc[]
|
|
include::certutil.asciidoc[]
|
|
include::create-enrollment-token.asciidoc[]
|
|
include::croneval.asciidoc[]
|
|
include::keystore.asciidoc[]
|
|
include::node-tool.asciidoc[]
|
|
include::reset-elastic-password.asciidoc[]
|
|
include::saml-metadata.asciidoc[]
|
|
include::service-tokens-command.asciidoc[]
|
|
include::setup-passwords.asciidoc[]
|
|
include::shard-tool.asciidoc[]
|
|
include::syskeygen.asciidoc[]
|
|
include::users-command.asciidoc[]
|