Elasticsearch¶
All indexes are stored in an ES instance. In order to provide ACLs using ReadOnly-REST an account/user for each instance is created. This user will only have access to certain prefixes, which will be <PRFIX>_<INSTANCE_NAME>
.
For example, the indexes cernsearch-test_doc_v1.0.0
and cernsearch-test_collection_v1.0.0
will be access by the user cernsearch-test
, who will only have access to cernsearch-test[_-]*
indexes.
Production vs QA
The logic is the same. You just need to change the prefix of your indexes, for example cernsearch
could be Prod and cernsearchqa
QA.