opensearch-project / security

🔐 Secure your cluster with TLS, numerous authentication backends, data masking, audit logging as well as role-based access control on indices, documents, and fields
https://opensearch.org/docs/latest/security-plugin/index/
Apache License 2.0
189 stars 271 forks source link

API-Key generation API is missing #1504

Open SebastianGode opened 2 years ago

SebastianGode commented 2 years ago

Is your feature request related to a problem? Please describe. Instead of using normal user+password authentication I would like to have an never expiring API key as Elasticsearch also offers. https://www.elastic.co/guide/en/elasticsearch/reference/7.16/security-api-create-api-key.html Currently I have not found any way to generate such a key as the security plugin does not have such an option yet: https://opensearch.org/docs/latest/security-plugin/access-control/api/

Describe the solution you'd like It would be great to have an Elasticsearch compatible API for generating API-keys

jcannell commented 2 years ago

Was just looking for this feature today...would love to have this.

maddisondavid commented 2 years ago

+1 I was also searching around thinking I'd missed something in the documentation!

feli0821 commented 2 years ago

+1 also looking for this feature

jansyren commented 2 years ago

+1 yes this would be a great feature, lots of applications writing to elastic has this support so adding it to Opensearch would be a good improvement.

djfranzelttec commented 2 years ago

Would be an excellent feature to have.

emollusion commented 2 years ago

+1 on this one, good to have when implementing "machine to machine" where cert auth is not possible.

bidetzz commented 8 months ago

+1 this feature would be a great addition

nundys commented 1 month ago

+1