Search code examples
elasticsearchspring-data-elasticsearch

why does it need cluster:monitor/main permission

ES 7.17 cloud is hosted in https://xxx.elastic-cloud.com:9243]

Using Java High Level REST client, I was able to connect to server using spring data ES 4.1.5(ES client 7.9.3). Now I update to spring data ES 4.4.1 (ES client 7.17.4). But it gives me permission issue.

"root_cause":[{"type":"security_exception","reason":"action [cluster:monitor/main] is unauthorized for user [xxxx] with roles

Why does it need this permission?

Solution

  • It's because the client pings the cluster using the / endpoint and it's actually why the cluster:monitor/main privilege is required.

    I believe this was added after the 7.10.2 Opensearch fork.