Examples with IndexNameExpressionResolver org.opensearch.cluster.metadata.IndexNameExpressionResolver used on opensource projects

Example 16 with IndexNameExpressionResolver

use of org.opensearch.cluster.metadata.IndexNameExpressionResolver in project security by opensearch-project.

the class OpenSearchSecurityPlugin method createComponents.

@Override
public Collection<Object> createComponents(Client localClient, ClusterService clusterService, ThreadPool threadPool, ResourceWatcherService resourceWatcherService, ScriptService scriptService, NamedXContentRegistry xContentRegistry, Environment environment, NodeEnvironment nodeEnvironment, NamedWriteableRegistry namedWriteableRegistry, IndexNameExpressionResolver indexNameExpressionResolver, Supplier<RepositoriesService> repositoriesServiceSupplier) {
    SSLConfig.registerClusterSettingsChangeListener(clusterService.getClusterSettings());
    if (SSLConfig.isSslOnlyMode()) {
        return super.createComponents(localClient, clusterService, threadPool, resourceWatcherService, scriptService, xContentRegistry, environment, nodeEnvironment, namedWriteableRegistry, indexNameExpressionResolver, repositoriesServiceSupplier);
    }
    this.threadPool = threadPool;
    this.cs = clusterService;
    this.localClient = localClient;
    final List<Object> components = new ArrayList<Object>();
    if (client || disabled) {
        return components;
    }
    // Register opensearch dynamic settings
    transportPassiveAuthSetting.registerClusterSettingsChangeListener(clusterService.getClusterSettings());
    final ClusterInfoHolder cih = new ClusterInfoHolder();
    this.cs.addListener(cih);
    this.salt = Salt.from(settings);
    final IndexNameExpressionResolver resolver = new IndexNameExpressionResolver(threadPool.getThreadContext());
    irr = new IndexResolverReplacer(resolver, clusterService, cih);
    final String DEFAULT_INTERCLUSTER_REQUEST_EVALUATOR_CLASS = DefaultInterClusterRequestEvaluator.class.getName();
    InterClusterRequestEvaluator interClusterRequestEvaluator = new DefaultInterClusterRequestEvaluator(settings);
    final String className = settings.get(ConfigConstants.SECURITY_INTERCLUSTER_REQUEST_EVALUATOR_CLASS, DEFAULT_INTERCLUSTER_REQUEST_EVALUATOR_CLASS);
    log.debug("Using {} as intercluster request evaluator class", className);
    if (!DEFAULT_INTERCLUSTER_REQUEST_EVALUATOR_CLASS.equals(className)) {
        interClusterRequestEvaluator = ReflectionHelper.instantiateInterClusterRequestEvaluator(className, settings);
    }
    final PrivilegesInterceptor privilegesInterceptor;
    if (SSLConfig.isSslOnlyMode()) {
        dlsFlsValve = new DlsFlsRequestValve.NoopDlsFlsRequestValve();
        auditLog = new NullAuditLog();
        privilegesInterceptor = new PrivilegesInterceptor(resolver, clusterService, localClient, threadPool);
    } else {
        dlsFlsValve = new DlsFlsValveImpl(settings, localClient, clusterService, resolver, xContentRegistry, threadPool.getThreadContext());
        auditLog = new AuditLogImpl(settings, configPath, localClient, threadPool, resolver, clusterService, environment);
        privilegesInterceptor = new PrivilegesInterceptorImpl(resolver, clusterService, localClient, threadPool);
    }
    sslExceptionHandler = new AuditLogSslExceptionHandler(auditLog);
    adminDns = new AdminDNs(settings);
    cr = ConfigurationRepository.create(settings, this.configPath, threadPool, localClient, clusterService, auditLog);
    final XFFResolver xffResolver = new XFFResolver(threadPool);
    backendRegistry = new BackendRegistry(settings, adminDns, xffResolver, auditLog, threadPool);
    final CompatConfig compatConfig = new CompatConfig(environment, transportPassiveAuthSetting);
    // DLS-FLS is enabled if not client and not disabled and not SSL only.
    final boolean dlsFlsEnabled = !SSLConfig.isSslOnlyMode();
    evaluator = new PrivilegesEvaluator(clusterService, threadPool, cr, resolver, auditLog, settings, privilegesInterceptor, cih, irr, dlsFlsEnabled, namedXContentRegistry);
    sf = new SecurityFilter(settings, evaluator, adminDns, dlsFlsValve, auditLog, threadPool, cs, compatConfig, irr, xffResolver);
    final String principalExtractorClass = settings.get(SSLConfigConstants.SECURITY_SSL_TRANSPORT_PRINCIPAL_EXTRACTOR_CLASS, null);
    if (principalExtractorClass == null) {
        principalExtractor = new DefaultPrincipalExtractor();
    } else {
        principalExtractor = ReflectionHelper.instantiatePrincipalExtractor(principalExtractorClass);
    }
    securityRestHandler = new SecurityRestFilter(backendRegistry, auditLog, threadPool, principalExtractor, settings, configPath, compatConfig);
    final DynamicConfigFactory dcf = new DynamicConfigFactory(cr, settings, configPath, localClient, threadPool, cih);
    dcf.registerDCFListener(backendRegistry);
    dcf.registerDCFListener(compatConfig);
    dcf.registerDCFListener(irr);
    dcf.registerDCFListener(xffResolver);
    dcf.registerDCFListener(evaluator);
    dcf.registerDCFListener(securityRestHandler);
    if (!(auditLog instanceof NullAuditLog)) {
        // Don't register if advanced modules is disabled in which case auditlog is instance of NullAuditLog
        dcf.registerDCFListener(auditLog);
    }
    cr.setDynamicConfigFactory(dcf);
    si = new SecurityInterceptor(settings, threadPool, backendRegistry, auditLog, principalExtractor, interClusterRequestEvaluator, cs, Objects.requireNonNull(sslExceptionHandler), Objects.requireNonNull(cih), SSLConfig);
    components.add(principalExtractor);
    // is used to first establish trust between same cluster nodes and there after dynamic config is loaded if enabled.
    if (DEFAULT_INTERCLUSTER_REQUEST_EVALUATOR_CLASS.equals(className)) {
        DefaultInterClusterRequestEvaluator e = (DefaultInterClusterRequestEvaluator) interClusterRequestEvaluator;
        e.subscribeForChanges(dcf);
    }
    components.add(adminDns);
    components.add(cr);
    components.add(xffResolver);
    components.add(backendRegistry);
    components.add(evaluator);
    components.add(si);
    components.add(dcf);
    return components;
}

Example 17 with IndexNameExpressionResolver

use of org.opensearch.cluster.metadata.IndexNameExpressionResolver in project OpenSearch by opensearch-project.

the class IndicesRequestIT method testFlush.

public void testFlush() {
    String[] indexShardActions = new String[] { TransportShardFlushAction.NAME, TransportShardFlushAction.NAME + "[r]", TransportShardFlushAction.NAME + "[p]" };
    interceptTransportActions(indexShardActions);
    FlushRequest flushRequest = new FlushRequest(randomIndicesOrAliases());
    internalCluster().coordOnlyNodeClient().admin().indices().flush(flushRequest).actionGet();
    clearInterceptedActions();
    String[] indices = new IndexNameExpressionResolver(new ThreadContext(Settings.EMPTY)).concreteIndexNames(client().admin().cluster().prepareState().get().getState(), flushRequest);
    assertIndicesSubset(Arrays.asList(indices), indexShardActions);
}

Example 18 with IndexNameExpressionResolver

use of org.opensearch.cluster.metadata.IndexNameExpressionResolver in project OpenSearch by opensearch-project.

the class IndicesRequestIT method testRefresh.

public void testRefresh() {
    String[] indexShardActions = new String[] { TransportShardRefreshAction.NAME, TransportShardRefreshAction.NAME + "[r]", TransportShardRefreshAction.NAME + "[p]" };
    interceptTransportActions(indexShardActions);
    RefreshRequest refreshRequest = new RefreshRequest(randomIndicesOrAliases());
    internalCluster().coordOnlyNodeClient().admin().indices().refresh(refreshRequest).actionGet();
    clearInterceptedActions();
    String[] indices = new IndexNameExpressionResolver(new ThreadContext(Settings.EMPTY)).concreteIndexNames(client().admin().cluster().prepareState().get().getState(), refreshRequest);
    assertIndicesSubset(Arrays.asList(indices), indexShardActions);
}

Example 19 with IndexNameExpressionResolver

use of org.opensearch.cluster.metadata.IndexNameExpressionResolver in project OpenSearch by opensearch-project.

the class ActionModuleTests method testSetupRestHandlerContainsKnownBuiltin.

public void testSetupRestHandlerContainsKnownBuiltin() {
    SettingsModule settings = new SettingsModule(Settings.EMPTY);
    UsageService usageService = new UsageService();
    ActionModule actionModule = new ActionModule(settings.getSettings(), new IndexNameExpressionResolver(new ThreadContext(Settings.EMPTY)), settings.getIndexScopedSettings(), settings.getClusterSettings(), settings.getSettingsFilter(), null, emptyList(), null, null, usageService, null);
    actionModule.initRestHandlers(null);
    // At this point the easiest way to confirm that a handler is loaded is to try to register another one on top of it and to fail
    Exception e = expectThrows(IllegalArgumentException.class, () -> actionModule.getRestController().registerHandler(new RestHandler() {

        @Override
        public void handleRequest(RestRequest request, RestChannel channel, NodeClient client) throws Exception {
        }

        @Override
        public List<Route> routes() {
            return singletonList(new Route(Method.GET, "/"));
        }
    }));
    assertThat(e.getMessage(), startsWith("Cannot replace existing handler for [/] for method: GET"));
}

Example 20 with IndexNameExpressionResolver

use of org.opensearch.cluster.metadata.IndexNameExpressionResolver in project OpenSearch by opensearch-project.

the class AutoCreateIndexTests method testUpdate.

public void testUpdate() {
    boolean value = randomBoolean();
    Settings settings;
    if (value && randomBoolean()) {
        settings = Settings.EMPTY;
    } else {
        settings = Settings.builder().put(AutoCreateIndex.AUTO_CREATE_INDEX_SETTING.getKey(), value).build();
    }
    ClusterSettings clusterSettings = new ClusterSettings(settings, ClusterSettings.BUILT_IN_CLUSTER_SETTINGS);
    AutoCreateIndex autoCreateIndex = new AutoCreateIndex(settings, clusterSettings, new IndexNameExpressionResolver(new ThreadContext(Settings.EMPTY)), new SystemIndices(org.opensearch.common.collect.Map.of()));
    assertThat(autoCreateIndex.getAutoCreate().isAutoCreateIndex(), equalTo(value));
    Settings newSettings = Settings.builder().put(AutoCreateIndex.AUTO_CREATE_INDEX_SETTING.getKey(), !value).build();
    clusterSettings.applySettings(newSettings);
    assertThat(autoCreateIndex.getAutoCreate().isAutoCreateIndex(), equalTo(!value));
    newSettings = Settings.builder().put(AutoCreateIndex.AUTO_CREATE_INDEX_SETTING.getKey(), "logs-*").build();
    clusterSettings.applySettings(newSettings);
    assertThat(autoCreateIndex.getAutoCreate().isAutoCreateIndex(), equalTo(true));
    assertThat(autoCreateIndex.getAutoCreate().getExpressions().size(), equalTo(1));
    assertThat(autoCreateIndex.getAutoCreate().getExpressions().get(0).v1(), equalTo("logs-*"));
}