search-gurad权限整合es6.3.1后，java cl

es:6.3.1

kibana:6.3.1

首先需要在java中引入search-guard的6.3.1的包，包括ssl的包

<dependency>

    <groupId>com.floragunn</groupId>

    <artifactId>search-guard-ssl</artifactId>

    <version>6.3.1-25.4</version>

</dependency>

<dependency>

    <groupId>com.floragunn</groupId>

    <artifactId>search-guard-6</artifactId>

    <version>6.3.1-23.0</version>

    <scope>provided</scope>

</dependency>

2.将之前权限需要的jks文件，和秘钥要加入到项目中来，在elasticsearch.yaml中配置ssl相关的信息

searchguard.ssl.transport.keystore_filepath: node-0-keystore.jks

searchguard.ssl.transport.keystore_password: changeit

searchguard.ssl.transport.truststore_filepath: truststore.jks

searchguard.ssl.transport.truststore_password: changeit

searchguard.ssl.transport.enforce_hostname_verification: false

searchguard.ssl.transport.resolve_hostname: false

searchguard.authcz.admin_dn:

- CN=sgadmin,OU=client,O=client,L=Test, C=DE

searchguard.nodes_dn:

- 'CN=node-*.example.com,OU=SSL,O=Test,L=Test,C=DE'

在ElasticSearchConnection类中中代码中需要如下指定：

Settings settings = Settings.builder()

                .put("client.transport.ignore_cluster_name", true)

                .put("path.home", ".")

//                .put("path.conf", "E:\\gitlab\\DpGodFarm\\DpGodFarm2\\DpGodFarm\\src\\main\\resources")

                .put("cluster.name", "testes-cluster")

                .put("searchguard.ssl.transport.enabled", true)

                .put("searchguard.ssl.transport.keystore_filepath", "sgadmin-keystore.jks")

                .put("searchguard.ssl.transport.truststore_filepath", "truststore.jks")

                .put("searchguard.ssl.http.keystore_password", "changeit")

                .put("searchguard.ssl.http.truststore_password", "changeit")

                .put("searchguard.ssl.transport.keystore_password", "changeit")

                .put("searchguard.ssl.transport.truststore_password", "changeit")

                .put("searchguard.ssl.transport.enforce_hostname_verification", false)

                .build();

        try {

（一定要加入SearchGuardPlugin.class，否则启动一直报错找不到searchguard.ssl.transport.keystore_filepath）

TransportClient transportClient = new PreBuiltTransportClient(settings,SearchGuardPlugin.class);

我觉得是要设置用户的，万一开发的不小心把库删了怎么办

.put("request.headers.sg_impersonate_as", "kibana5")