├── .github └── workflows │ └── ci.yml ├── .gitignore ├── CODE_OF_CONDUCT.md ├── CONTRIBUTING.md ├── LICENSE ├── README.md ├── build.gradle ├── gradle └── wrapper │ ├── gradle-wrapper.jar │ └── gradle-wrapper.properties ├── gradlew ├── gradlew.bat ├── opendistro-elasticsearch-security-parent.release-notes └── pom.xml /.github/workflows/ci.yml: -------------------------------------------------------------------------------- 1 | name: CI 2 | 3 | on: 4 | pull_request: 5 | branches: 6 | - '*' 7 | push: 8 | branches: 9 | - master 10 | 11 | jobs: 12 | build: 13 | runs-on: ubuntu-latest 14 | container: opendistroforelasticsearch/security-maven:v1 15 | 16 | steps: 17 | 18 | - name: Checkout 19 | uses: actions/checkout@v1 20 | 21 | - name: Install 22 | run: mvn clean install 23 | 24 | -------------------------------------------------------------------------------- /.gitignore: -------------------------------------------------------------------------------- 1 | build/ 2 | gradle-build/ 3 | .gradle/ 4 | .idea/ 5 | *.iml 6 | -------------------------------------------------------------------------------- /CODE_OF_CONDUCT.md: -------------------------------------------------------------------------------- 1 | ## Code of Conduct 2 | This project has adopted an [Open Source Code of Conduct](https://opendistro.github.io/for-elasticsearch/codeofconduct.html). 3 | -------------------------------------------------------------------------------- /CONTRIBUTING.md: -------------------------------------------------------------------------------- 1 | # Contributing Guidelines 2 | 3 | Thank you for your interest in contributing to our project. Whether it's a bug report, new feature, correction, or additional 4 | documentation, we greatly value feedback and contributions from our community. 5 | 6 | Please read through this document before submitting any issues or pull requests to ensure we have all the necessary 7 | information to effectively respond to your bug report or contribution. 8 | 9 | 10 | ## Reporting Bugs/Feature Requests 11 | 12 | We welcome you to use the GitHub issue tracker to report bugs or suggest features. 13 | 14 | When filing an issue, please check [existing open](../../issues), or [recently closed](../../issues?utf8=%E2%9C%93&q=is%3Aissue%20is%3Aclosed%20), issues to make sure somebody else hasn't already reported the issue. Please try to include as much information as you can. Details like these are incredibly useful: 15 | 16 | * A reproducible test case or series of steps 17 | * The version of our code being used 18 | * Any modifications you've made relevant to the bug 19 | * Anything unusual about your environment or deployment 20 | 21 | 22 | ## Contributing via Pull Requests 23 | Contributions via pull requests are much appreciated. Before sending us a pull request, please ensure that: 24 | 25 | 1. You are working against the latest source on the *master* branch. 26 | 2. You check existing open, and recently merged, pull requests to make sure someone else hasn't addressed the problem already. 27 | 3. You open an issue to discuss any significant work - we would hate for your time to be wasted. 28 | 29 | To send us a pull request, please: 30 | 31 | 1. Fork the repository. 32 | 2. Modify the source; please focus on the specific change you are contributing. If you also reformat all the code, it will be hard for us to focus on your change. 33 | 3. Ensure local tests pass. 34 | 4. Commit to your fork using clear commit messages. 35 | 5. Send us a pull request, answering any default questions in the pull request interface. 36 | 6. Pay attention to any automated CI failures reported in the pull request, and stay involved in the conversation. 37 | 38 | GitHub provides additional document on [forking a repository](https://help.github.com/articles/fork-a-repo/) and 39 | [creating a pull request](https://help.github.com/articles/creating-a-pull-request/). 40 | 41 | 42 | ## Finding contributions to work on 43 | Looking at the existing issues is a great way to find something to contribute on. As our projects, by default, use the default GitHub issue labels (enhancement/bug/duplicate/help wanted/invalid/question/wontfix), looking at any ['help wanted'](../../labels/help%20wanted) issues is a great place to start. 44 | 45 | 46 | ## Code of Conduct 47 | 48 | This project has adopted an [Open Source Code of Conduct](https://opendistro.github.io/for-elasticsearch/codeofconduct.html). 49 | 50 | 51 | ## Security issue notifications 52 | 53 | If you discover a potential security issue in this project we ask that you notify AWS/Amazon Security via our [vulnerability reporting page](http://aws.amazon.com/security/vulnerability-reporting/). Please do **not** create a public GitHub issue. 54 | 55 | 56 | ## Licensing 57 | 58 | See the [LICENSE](./LICENSE) file for our project's licensing. We will ask you to confirm the licensing of your contribution. 59 | 60 | -------------------------------------------------------------------------------- /LICENSE: -------------------------------------------------------------------------------- 1 | 2 | Apache License 3 | Version 2.0, January 2004 4 | http://www.apache.org/licenses/ 5 | 6 | TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION 7 | 8 | 1. Definitions. 9 | 10 | "License" shall mean the terms and conditions for use, reproduction, 11 | and distribution as defined by Sections 1 through 9 of this document. 12 | 13 | "Licensor" shall mean the copyright owner or entity authorized by 14 | the copyright owner that is granting the License. 15 | 16 | "Legal Entity" shall mean the union of the acting entity and all 17 | other entities that control, are controlled by, or are under common 18 | control with that entity. For the purposes of this definition, 19 | "control" means (i) the power, direct or indirect, to cause the 20 | direction or management of such entity, whether by contract or 21 | otherwise, or (ii) ownership of fifty percent (50%) or more of the 22 | outstanding shares, or (iii) beneficial ownership of such entity. 23 | 24 | "You" (or "Your") shall mean an individual or Legal Entity 25 | exercising permissions granted by this License. 26 | 27 | "Source" form shall mean the preferred form for making modifications, 28 | including but not limited to software source code, documentation 29 | source, and configuration files. 30 | 31 | "Object" form shall mean any form resulting from mechanical 32 | transformation or translation of a Source form, including but 33 | not limited to compiled object code, generated documentation, 34 | and conversions to other media types. 35 | 36 | "Work" shall mean the work of authorship, whether in Source or 37 | Object form, made available under the License, as indicated by a 38 | copyright notice that is included in or attached to the work 39 | (an example is provided in the Appendix below). 40 | 41 | "Derivative Works" shall mean any work, whether in Source or Object 42 | form, that is based on (or derived from) the Work and for which the 43 | editorial revisions, annotations, elaborations, or other modifications 44 | represent, as a whole, an original work of authorship. For the purposes 45 | of this License, Derivative Works shall not include works that remain 46 | separable from, or merely link (or bind by name) to the interfaces of, 47 | the Work and Derivative Works thereof. 48 | 49 | "Contribution" shall mean any work of authorship, including 50 | the original version of the Work and any modifications or additions 51 | to that Work or Derivative Works thereof, that is intentionally 52 | submitted to Licensor for inclusion in the Work by the copyright owner 53 | or by an individual or Legal Entity authorized to submit on behalf of 54 | the copyright owner. For the purposes of this definition, "submitted" 55 | means any form of electronic, verbal, or written communication sent 56 | to the Licensor or its representatives, including but not limited to 57 | communication on electronic mailing lists, source code control systems, 58 | and issue tracking systems that are managed by, or on behalf of, the 59 | Licensor for the purpose of discussing and improving the Work, but 60 | excluding communication that is conspicuously marked or otherwise 61 | designated in writing by the copyright owner as "Not a Contribution." 62 | 63 | "Contributor" shall mean Licensor and any individual or Legal Entity 64 | on behalf of whom a Contribution has been received by Licensor and 65 | subsequently incorporated within the Work. 66 | 67 | 2. Grant of Copyright License. Subject to the terms and conditions of 68 | this License, each Contributor hereby grants to You a perpetual, 69 | worldwide, non-exclusive, no-charge, royalty-free, irrevocable 70 | copyright license to reproduce, prepare Derivative Works of, 71 | publicly display, publicly perform, sublicense, and distribute the 72 | Work and such Derivative Works in Source or Object form. 73 | 74 | 3. Grant of Patent License. Subject to the terms and conditions of 75 | this License, each Contributor hereby grants to You a perpetual, 76 | worldwide, non-exclusive, no-charge, royalty-free, irrevocable 77 | (except as stated in this section) patent license to make, have made, 78 | use, offer to sell, sell, import, and otherwise transfer the Work, 79 | where such license applies only to those patent claims licensable 80 | by such Contributor that are necessarily infringed by their 81 | Contribution(s) alone or by combination of their Contribution(s) 82 | with the Work to which such Contribution(s) was submitted. If You 83 | institute patent litigation against any entity (including a 84 | cross-claim or counterclaim in a lawsuit) alleging that the Work 85 | or a Contribution incorporated within the Work constitutes direct 86 | or contributory patent infringement, then any patent licenses 87 | granted to You under this License for that Work shall terminate 88 | as of the date such litigation is filed. 89 | 90 | 4. Redistribution. You may reproduce and distribute copies of the 91 | Work or Derivative Works thereof in any medium, with or without 92 | modifications, and in Source or Object form, provided that You 93 | meet the following conditions: 94 | 95 | (a) You must give any other recipients of the Work or 96 | Derivative Works a copy of this License; and 97 | 98 | (b) You must cause any modified files to carry prominent notices 99 | stating that You changed the files; and 100 | 101 | (c) You must retain, in the Source form of any Derivative Works 102 | that You distribute, all copyright, patent, trademark, and 103 | attribution notices from the Source form of the Work, 104 | excluding those notices that do not pertain to any part of 105 | the Derivative Works; and 106 | 107 | (d) If the Work includes a "NOTICE" text file as part of its 108 | distribution, then any Derivative Works that You distribute must 109 | include a readable copy of the attribution notices contained 110 | within such NOTICE file, excluding those notices that do not 111 | pertain to any part of the Derivative Works, in at least one 112 | of the following places: within a NOTICE text file distributed 113 | as part of the Derivative Works; within the Source form or 114 | documentation, if provided along with the Derivative Works; or, 115 | within a display generated by the Derivative Works, if and 116 | wherever such third-party notices normally appear. The contents 117 | of the NOTICE file are for informational purposes only and 118 | do not modify the License. You may add Your own attribution 119 | notices within Derivative Works that You distribute, alongside 120 | or as an addendum to the NOTICE text from the Work, provided 121 | that such additional attribution notices cannot be construed 122 | as modifying the License. 123 | 124 | You may add Your own copyright statement to Your modifications and 125 | may provide additional or different license terms and conditions 126 | for use, reproduction, or distribution of Your modifications, or 127 | for any such Derivative Works as a whole, provided Your use, 128 | reproduction, and distribution of the Work otherwise complies with 129 | the conditions stated in this License. 130 | 131 | 5. Submission of Contributions. Unless You explicitly state otherwise, 132 | any Contribution intentionally submitted for inclusion in the Work 133 | by You to the Licensor shall be under the terms and conditions of 134 | this License, without any additional terms or conditions. 135 | Notwithstanding the above, nothing herein shall supersede or modify 136 | the terms of any separate license agreement you may have executed 137 | with Licensor regarding such Contributions. 138 | 139 | 6. Trademarks. This License does not grant permission to use the trade 140 | names, trademarks, service marks, or product names of the Licensor, 141 | except as required for reasonable and customary use in describing the 142 | origin of the Work and reproducing the content of the NOTICE file. 143 | 144 | 7. Disclaimer of Warranty. Unless required by applicable law or 145 | agreed to in writing, Licensor provides the Work (and each 146 | Contributor provides its Contributions) on an "AS IS" BASIS, 147 | WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or 148 | implied, including, without limitation, any warranties or conditions 149 | of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A 150 | PARTICULAR PURPOSE. You are solely responsible for determining the 151 | appropriateness of using or redistributing the Work and assume any 152 | risks associated with Your exercise of permissions under this License. 153 | 154 | 8. Limitation of Liability. In no event and under no legal theory, 155 | whether in tort (including negligence), contract, or otherwise, 156 | unless required by applicable law (such as deliberate and grossly 157 | negligent acts) or agreed to in writing, shall any Contributor be 158 | liable to You for damages, including any direct, indirect, special, 159 | incidental, or consequential damages of any character arising as a 160 | result of this License or out of the use or inability to use the 161 | Work (including but not limited to damages for loss of goodwill, 162 | work stoppage, computer failure or malfunction, or any and all 163 | other commercial damages or losses), even if such Contributor 164 | has been advised of the possibility of such damages. 165 | 166 | 9. Accepting Warranty or Additional Liability. While redistributing 167 | the Work or Derivative Works thereof, You may choose to offer, 168 | and charge a fee for, acceptance of support, warranty, indemnity, 169 | or other liability obligations and/or rights consistent with this 170 | License. However, in accepting such obligations, You may act only 171 | on Your own behalf and on Your sole responsibility, not on behalf 172 | of any other Contributor, and only if You agree to indemnify, 173 | defend, and hold each Contributor harmless for any liability 174 | incurred by, or claims asserted against, such Contributor by reason 175 | of your accepting any such warranty or additional liability. 176 | 177 | END OF TERMS AND CONDITIONS 178 | 179 | APPENDIX: How to apply the Apache License to your work. 180 | 181 | To apply the Apache License to your work, attach the following 182 | boilerplate notice, with the fields enclosed by brackets "[]" 183 | replaced with your own identifying information. (Don't include 184 | the brackets!) The text should be enclosed in the appropriate 185 | comment syntax for the file format. We also recommend that a 186 | file or class name and description of purpose be included on the 187 | same "printed page" as the copyright notice for easier 188 | identification within third-party archives. 189 | 190 | Copyright [yyyy] [name of copyright owner] 191 | 192 | Licensed under the Apache License, Version 2.0 (the "License"); 193 | you may not use this file except in compliance with the License. 194 | You may obtain a copy of the License at 195 | 196 | http://www.apache.org/licenses/LICENSE-2.0 197 | 198 | Unless required by applicable law or agreed to in writing, software 199 | distributed under the License is distributed on an "AS IS" BASIS, 200 | WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. 201 | See the License for the specific language governing permissions and 202 | limitations under the License. -------------------------------------------------------------------------------- /README.md: -------------------------------------------------------------------------------- 1 | 2 | [![CI](https://github.com/opendistro-for-elasticsearch/security-parent/workflows/CI/badge.svg?branch=master)](https://github.com/opendistro-for-elasticsearch/security-parent/actions) 3 | 4 | ## Deprecated as of Opendistro version 1.4: 5 | 6 | * Security-advanced-modules and security-parent have been merged into security. 7 | 8 | # Open Distro For Elasticsearch Security Parent 9 | 10 | Open Distro for Elasticsearch Security Parent is the parent repo for the Open Distro for Elasticsearch security plugin repositories, including: 11 | 12 | [Security]( https://github.com/opendistro-for-elasticsearch/security) 13 | 14 | [Security-SSL]( https://github.com/opendistro-for-elasticsearch/security-ssl) 15 | 16 | [Security Advanced Modules]( https://github.com/opendistro-for-elasticsearch/security-advanced-modules) 17 | 18 | [Security Kibana Plugin]( https://github.com/opendistro-for-elasticsearch/security-kibana-plugin) 19 | 20 | ## Documentation 21 | Please refer to the [technical documentation](https://opendistro.github.io/for-elasticsearch-docs/docs/security-configuration) for detailed information. 22 | 23 | ## Requirements 24 | 25 | Make sure you are in the elasticsearch/linux_distributions folder. Here are the instructions for installing Java (OpenJDK 11) for Debian based distributions. 26 | 27 | ``` 28 | sudo add-apt-repository ppa:openjdk-r/ppa 29 | sudo apt-get update 30 | sudo apt install openjdk-11-jdk 31 | ``` 32 | 33 | ## Build 34 | To build the security plugin from source follow these instructions **in this order**: 35 | 36 | 37 | 1. Download the `security-parent` source code: 38 | 39 | ``` 40 | git clone https://github.com/opendistro-for-elasticsearch/security-parent.git 41 | ``` 42 | 43 | 2. Install to the local repository folder named `.m2`: 44 | 45 | 46 | ``` 47 | cd security-parent 48 | mvn clean install 49 | cd .. 50 | ``` 51 | 52 | 3. Download the `security-ssl` source code: 53 | 54 | **(Note: This step is needed only for the security plug-in for Open Distro version 0.10.0 supporting Elasticsearch 6.8.1 and below.)** 55 | 56 | ``` 57 | git clone https://github.com/opendistro-for-elasticsearch/security-ssl.git 58 | ``` 59 | 60 | 4. Install to the local repository folder named `.m2`: 61 | 62 | ``` 63 | cd security-ssl 64 | mvn clean install 65 | cd .. 66 | ``` 67 | 68 | 5. Download the `security` source code: 69 | 70 | ``` 71 | git clone https://github.com/opendistro-for-elasticsearch/security.git 72 | ``` 73 | 74 | 6. Install to the local repository folder named `.m2`: 75 | 76 | ``` 77 | cd security 78 | mvn clean install 79 | cd .. 80 | ``` 81 | 82 | 7. Download the `security-advanced-modules` source code: 83 | 84 | ``` 85 | git clone https://github.com/opendistro-for-elasticsearch/security-advanced-modules.git 86 | ``` 87 | 88 | 8. Install to the local repository folder named `.m2`: 89 | 90 | ``` 91 | cd security-advanced-modules 92 | mvn clean install 93 | cd .. 94 | ``` 95 | 96 | 9. Build the Elasticsearch plugin and install final artifacts: 97 | 98 | ``` 99 | cd security 100 | mvn clean package -Padvanced 101 | ``` 102 | 103 | The above builds the final artifacts in zip format. 104 | 105 | ``` 106 | cd target/releases/ 107 | ``` 108 | 109 | The artifacts can be found in the folder listed above. 110 | 111 | 10. Detailed instructions on how to build the **security-kibana** plugin can be found here: 112 | 113 | https://github.com/opendistro-for-elasticsearch/security-kibana-plugin/blob/master/README.md#build 114 | 115 | 116 | ## Install 117 | 118 | Install the plugin to your Elasticsearch cluster with the following commands: 119 | 120 | ``` 121 | cd elasticsearch/bin 122 | ./elasticsearch-plugin install file:///path/to/security/target/releases/opendistro_security-.zip 123 | ``` 124 | 125 | ## License 126 | 127 | This code is licensed under the Apache 2.0 License. 128 | 129 | ## Copyright 130 | 131 | Open Distro For Elasticsearch Security Copyright 2019 Amazon.com, Inc. or its affiliates. All Rights Reserved. 132 | 133 | -------------------------------------------------------------------------------- /build.gradle: -------------------------------------------------------------------------------- 1 | // Uses Gradle to build RPMs since that's what we use for the other plugins. When all you have is a hammer... 2 | plugins { 3 | id "nebula.ospackage" version "5.3.0" 4 | } 5 | 6 | // To prevent conflicts with maven build under build/ 7 | buildDir = 'gradle-build' 8 | 9 | ext { 10 | opendistroVersion = '1.3.0' 11 | isSnapshot = "true" == System.getProperty("build.snapshot", "true") 12 | } 13 | 14 | group = "com.amazon.opendistroforelasticsearch" 15 | // Increment the final digit when there's a new plugin versions for the same opendistro version 16 | // Reset the final digit to 0 when upgrading to a new opendistro version 17 | version = "${opendistroVersion}.0" + (isSnapshot ? "-SNAPSHOT" : "") 18 | 19 | 20 | if (!project.hasProperty("archivePath")) { 21 | throw new GradleException("Missing -ParchivePath command line switch pointing to built plugin ZIP") 22 | } 23 | if (!project.file(archivePath).exists()) { 24 | throw new GradleException("Missing plugin zip file: $archivePath") 25 | } 26 | 27 | ospackage { 28 | packageName = "opendistro-security" 29 | release = isSnapshot ? "0.0" : '0' 30 | version = "${project.version}" - "-SNAPSHOT" 31 | 32 | into '/usr/share/elasticsearch/plugins' 33 | from(zipTree(project.file(archivePath).absolutePath)) { 34 | into "opendistro_security" 35 | } 36 | 37 | user 'root' 38 | permissionGroup 'root' 39 | fileMode 0644 40 | dirMode 0755 41 | 42 | requires('elasticsearch-oss', "7.3.2", EQUAL) 43 | packager = 'Amazon' 44 | vendor = 'Amazon' 45 | os = 'LINUX' 46 | prefix '/usr' 47 | 48 | license 'ASL-2.0' 49 | maintainer 'OpenDistro for Elasticsearch Team ' 50 | url 'https://opendistro.github.io/elasticsearch/downloads' 51 | summary ''' 52 | Security plugin for OpenDistro for Elasticsearch. 53 | Reference documentation can be found at https://opendistro.github.io/elasticsearch/docs. 54 | '''.stripIndent().replace('\n', ' ').trim() 55 | 56 | //TODO: Would be better if the install_demo_configuration.sh script is marked executable in the upstream plugin instead of running bash manually here 57 | postInstall "exec /bin/bash /usr/share/elasticsearch/plugins/opendistro_security/tools/install_demo_configuration.sh -y -i -s" 58 | } 59 | 60 | buildRpm { 61 | arch = 'NOARCH' 62 | archiveName "${packageName}-${version}.rpm" 63 | } 64 | 65 | buildDeb { 66 | arch = 'amd64' 67 | archiveName "${packageName}-${version}.deb" 68 | } 69 | -------------------------------------------------------------------------------- /gradle/wrapper/gradle-wrapper.jar: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/opendistro-for-elasticsearch/deprecated-security-parent/e35bc28dc2a1ccd2400bbeddc0f9c07d6115b27e/gradle/wrapper/gradle-wrapper.jar -------------------------------------------------------------------------------- /gradle/wrapper/gradle-wrapper.properties: -------------------------------------------------------------------------------- 1 | distributionBase=GRADLE_USER_HOME 2 | distributionPath=wrapper/dists 3 | distributionUrl=https\://services.gradle.org/distributions/gradle-4.10.2-bin.zip 4 | zipStoreBase=GRADLE_USER_HOME 5 | zipStorePath=wrapper/dists 6 | -------------------------------------------------------------------------------- /gradlew: -------------------------------------------------------------------------------- 1 | #!/usr/bin/env sh 2 | 3 | ############################################################################## 4 | ## 5 | ## Gradle start up script for UN*X 6 | ## 7 | ############################################################################## 8 | 9 | # Attempt to set APP_HOME 10 | # Resolve links: $0 may be a link 11 | PRG="$0" 12 | # Need this for relative symlinks. 13 | while [ -h "$PRG" ] ; do 14 | ls=`ls -ld "$PRG"` 15 | link=`expr "$ls" : '.*-> \(.*\)$'` 16 | if expr "$link" : '/.*' > /dev/null; then 17 | PRG="$link" 18 | else 19 | PRG=`dirname "$PRG"`"/$link" 20 | fi 21 | done 22 | SAVED="`pwd`" 23 | cd "`dirname \"$PRG\"`/" >/dev/null 24 | APP_HOME="`pwd -P`" 25 | cd "$SAVED" >/dev/null 26 | 27 | APP_NAME="Gradle" 28 | APP_BASE_NAME=`basename "$0"` 29 | 30 | # Add default JVM options here. You can also use JAVA_OPTS and GRADLE_OPTS to pass JVM options to this script. 31 | DEFAULT_JVM_OPTS="" 32 | 33 | # Use the maximum available, or set MAX_FD != -1 to use that value. 34 | MAX_FD="maximum" 35 | 36 | warn () { 37 | echo "$*" 38 | } 39 | 40 | die () { 41 | echo 42 | echo "$*" 43 | echo 44 | exit 1 45 | } 46 | 47 | # OS specific support (must be 'true' or 'false'). 48 | cygwin=false 49 | msys=false 50 | darwin=false 51 | nonstop=false 52 | case "`uname`" in 53 | CYGWIN* ) 54 | cygwin=true 55 | ;; 56 | Darwin* ) 57 | darwin=true 58 | ;; 59 | MINGW* ) 60 | msys=true 61 | ;; 62 | NONSTOP* ) 63 | nonstop=true 64 | ;; 65 | esac 66 | 67 | CLASSPATH=$APP_HOME/gradle/wrapper/gradle-wrapper.jar 68 | 69 | # Determine the Java command to use to start the JVM. 70 | if [ -n "$JAVA_HOME" ] ; then 71 | if [ -x "$JAVA_HOME/jre/sh/java" ] ; then 72 | # IBM's JDK on AIX uses strange locations for the executables 73 | JAVACMD="$JAVA_HOME/jre/sh/java" 74 | else 75 | JAVACMD="$JAVA_HOME/bin/java" 76 | fi 77 | if [ ! -x "$JAVACMD" ] ; then 78 | die "ERROR: JAVA_HOME is set to an invalid directory: $JAVA_HOME 79 | 80 | Please set the JAVA_HOME variable in your environment to match the 81 | location of your Java installation." 82 | fi 83 | else 84 | JAVACMD="java" 85 | which java >/dev/null 2>&1 || die "ERROR: JAVA_HOME is not set and no 'java' command could be found in your PATH. 86 | 87 | Please set the JAVA_HOME variable in your environment to match the 88 | location of your Java installation." 89 | fi 90 | 91 | # Increase the maximum file descriptors if we can. 92 | if [ "$cygwin" = "false" -a "$darwin" = "false" -a "$nonstop" = "false" ] ; then 93 | MAX_FD_LIMIT=`ulimit -H -n` 94 | if [ $? -eq 0 ] ; then 95 | if [ "$MAX_FD" = "maximum" -o "$MAX_FD" = "max" ] ; then 96 | MAX_FD="$MAX_FD_LIMIT" 97 | fi 98 | ulimit -n $MAX_FD 99 | if [ $? -ne 0 ] ; then 100 | warn "Could not set maximum file descriptor limit: $MAX_FD" 101 | fi 102 | else 103 | warn "Could not query maximum file descriptor limit: $MAX_FD_LIMIT" 104 | fi 105 | fi 106 | 107 | # For Darwin, add options to specify how the application appears in the dock 108 | if $darwin; then 109 | GRADLE_OPTS="$GRADLE_OPTS \"-Xdock:name=$APP_NAME\" \"-Xdock:icon=$APP_HOME/media/gradle.icns\"" 110 | fi 111 | 112 | # For Cygwin, switch paths to Windows format before running java 113 | if $cygwin ; then 114 | APP_HOME=`cygpath --path --mixed "$APP_HOME"` 115 | CLASSPATH=`cygpath --path --mixed "$CLASSPATH"` 116 | JAVACMD=`cygpath --unix "$JAVACMD"` 117 | 118 | # We build the pattern for arguments to be converted via cygpath 119 | ROOTDIRSRAW=`find -L / -maxdepth 1 -mindepth 1 -type d 2>/dev/null` 120 | SEP="" 121 | for dir in $ROOTDIRSRAW ; do 122 | ROOTDIRS="$ROOTDIRS$SEP$dir" 123 | SEP="|" 124 | done 125 | OURCYGPATTERN="(^($ROOTDIRS))" 126 | # Add a user-defined pattern to the cygpath arguments 127 | if [ "$GRADLE_CYGPATTERN" != "" ] ; then 128 | OURCYGPATTERN="$OURCYGPATTERN|($GRADLE_CYGPATTERN)" 129 | fi 130 | # Now convert the arguments - kludge to limit ourselves to /bin/sh 131 | i=0 132 | for arg in "$@" ; do 133 | CHECK=`echo "$arg"|egrep -c "$OURCYGPATTERN" -` 134 | CHECK2=`echo "$arg"|egrep -c "^-"` ### Determine if an option 135 | 136 | if [ $CHECK -ne 0 ] && [ $CHECK2 -eq 0 ] ; then ### Added a condition 137 | eval `echo args$i`=`cygpath --path --ignore --mixed "$arg"` 138 | else 139 | eval `echo args$i`="\"$arg\"" 140 | fi 141 | i=$((i+1)) 142 | done 143 | case $i in 144 | (0) set -- ;; 145 | (1) set -- "$args0" ;; 146 | (2) set -- "$args0" "$args1" ;; 147 | (3) set -- "$args0" "$args1" "$args2" ;; 148 | (4) set -- "$args0" "$args1" "$args2" "$args3" ;; 149 | (5) set -- "$args0" "$args1" "$args2" "$args3" "$args4" ;; 150 | (6) set -- "$args0" "$args1" "$args2" "$args3" "$args4" "$args5" ;; 151 | (7) set -- "$args0" "$args1" "$args2" "$args3" "$args4" "$args5" "$args6" ;; 152 | (8) set -- "$args0" "$args1" "$args2" "$args3" "$args4" "$args5" "$args6" "$args7" ;; 153 | (9) set -- "$args0" "$args1" "$args2" "$args3" "$args4" "$args5" "$args6" "$args7" "$args8" ;; 154 | esac 155 | fi 156 | 157 | # Escape application args 158 | save () { 159 | for i do printf %s\\n "$i" | sed "s/'/'\\\\''/g;1s/^/'/;\$s/\$/' \\\\/" ; done 160 | echo " " 161 | } 162 | APP_ARGS=$(save "$@") 163 | 164 | # Collect all arguments for the java command, following the shell quoting and substitution rules 165 | eval set -- $DEFAULT_JVM_OPTS $JAVA_OPTS $GRADLE_OPTS "\"-Dorg.gradle.appname=$APP_BASE_NAME\"" -classpath "\"$CLASSPATH\"" org.gradle.wrapper.GradleWrapperMain "$APP_ARGS" 166 | 167 | # by default we should be in the correct project dir, but when run from Finder on Mac, the cwd is wrong 168 | if [ "$(uname)" = "Darwin" ] && [ "$HOME" = "$PWD" ]; then 169 | cd "$(dirname "$0")" 170 | fi 171 | 172 | exec "$JAVACMD" "$@" 173 | -------------------------------------------------------------------------------- /gradlew.bat: -------------------------------------------------------------------------------- 1 | @if "%DEBUG%" == "" @echo off 2 | @rem ########################################################################## 3 | @rem 4 | @rem Gradle startup script for Windows 5 | @rem 6 | @rem ########################################################################## 7 | 8 | @rem Set local scope for the variables with windows NT shell 9 | if "%OS%"=="Windows_NT" setlocal 10 | 11 | set DIRNAME=%~dp0 12 | if "%DIRNAME%" == "" set DIRNAME=. 13 | set APP_BASE_NAME=%~n0 14 | set APP_HOME=%DIRNAME% 15 | 16 | @rem Add default JVM options here. You can also use JAVA_OPTS and GRADLE_OPTS to pass JVM options to this script. 17 | set DEFAULT_JVM_OPTS= 18 | 19 | @rem Find java.exe 20 | if defined JAVA_HOME goto findJavaFromJavaHome 21 | 22 | set JAVA_EXE=java.exe 23 | %JAVA_EXE% -version >NUL 2>&1 24 | if "%ERRORLEVEL%" == "0" goto init 25 | 26 | echo. 27 | echo ERROR: JAVA_HOME is not set and no 'java' command could be found in your PATH. 28 | echo. 29 | echo Please set the JAVA_HOME variable in your environment to match the 30 | echo location of your Java installation. 31 | 32 | goto fail 33 | 34 | :findJavaFromJavaHome 35 | set JAVA_HOME=%JAVA_HOME:"=% 36 | set JAVA_EXE=%JAVA_HOME%/bin/java.exe 37 | 38 | if exist "%JAVA_EXE%" goto init 39 | 40 | echo. 41 | echo ERROR: JAVA_HOME is set to an invalid directory: %JAVA_HOME% 42 | echo. 43 | echo Please set the JAVA_HOME variable in your environment to match the 44 | echo location of your Java installation. 45 | 46 | goto fail 47 | 48 | :init 49 | @rem Get command-line arguments, handling Windows variants 50 | 51 | if not "%OS%" == "Windows_NT" goto win9xME_args 52 | 53 | :win9xME_args 54 | @rem Slurp the command line arguments. 55 | set CMD_LINE_ARGS= 56 | set _SKIP=2 57 | 58 | :win9xME_args_slurp 59 | if "x%~1" == "x" goto execute 60 | 61 | set CMD_LINE_ARGS=%* 62 | 63 | :execute 64 | @rem Setup the command line 65 | 66 | set CLASSPATH=%APP_HOME%\gradle\wrapper\gradle-wrapper.jar 67 | 68 | @rem Execute Gradle 69 | "%JAVA_EXE%" %DEFAULT_JVM_OPTS% %JAVA_OPTS% %GRADLE_OPTS% "-Dorg.gradle.appname=%APP_BASE_NAME%" -classpath "%CLASSPATH%" org.gradle.wrapper.GradleWrapperMain %CMD_LINE_ARGS% 70 | 71 | :end 72 | @rem End local scope for the variables with windows NT shell 73 | if "%ERRORLEVEL%"=="0" goto mainEnd 74 | 75 | :fail 76 | rem Set variable GRADLE_EXIT_CONSOLE if you need the _script_ return code instead of 77 | rem the _cmd.exe /c_ return code! 78 | if not "" == "%GRADLE_EXIT_CONSOLE%" exit 1 79 | exit /b 1 80 | 81 | :mainEnd 82 | if "%OS%"=="Windows_NT" endlocal 83 | 84 | :omega 85 | -------------------------------------------------------------------------------- /opendistro-elasticsearch-security-parent.release-notes: -------------------------------------------------------------------------------- 1 | ## 2019-11-18 Version 1.3.0.0 (Current) 2 | 3 | - Support for Elasticsearch 7.3.2 4 | 5 | ## 2019-10-10, Version 1.2.1.0 6 | 7 | - Support for Elasticsearch 7.2.1 8 | 9 | ## 2019-08-07, Version 1.2.0.0 10 | 11 | - Support for Elasticsearch 7.2.0 12 | 13 | ## 2019-06-21, Version 1.1.0.0 14 | 15 | - Support For Elasticsearch 7.1 16 | 17 | ## 2019-06-21, Version 1.0.0.0 18 | 19 | - Support For Elasticsearch 7.0 20 | 21 | ## 2019-04-23, Version 0.9.0.0 22 | 23 | - Support For Elasticsearch 6.7 24 | 25 | ## 2019-04-04, Version 0.8.0.0 26 | 27 | - Support For Elasticsearch 6.6 28 | 29 | ## 2019-03-19, Version 0.7.0.1 30 | 31 | - Fixed git repo URLs in pom.xml 32 | 33 | ## 2019-03-12, Version 0.7.0.0 34 | 35 | - Initial launch of security-parent for opendistro-for-elasticsearch 36 | -------------------------------------------------------------------------------- /pom.xml: -------------------------------------------------------------------------------- 1 | 2 | 16 | 17 | 31 | 32 | 33 | 4.0.0 34 | 35 | com.amazon.opendistroforelasticsearch 36 | opendistro_security_parent 37 | 1.3.0.0 38 | pom 39 | 40 | Open Distro For Elasticsearch Security Parent 41 | https://github.com/opendistro-for-elasticsearch/security-parent 42 | Open Distro For Elasticsearch Security Parent 43 | 44 | 45 | Apache License, Version 2.0 46 | http://www.apache.org/licenses/LICENSE-2.0.txt 47 | repo 48 | 49 | 50 | 51 | 52 | amazonwebservices 53 | Amazon Web Services 54 | https://aws.amazon.com 55 | 56 | developer 57 | 58 | 59 | 60 | 61 | 62 | UTF-8 63 | UTF-8 64 | https://oss.sonatype.org/content/repositories/snapshots/ 65 | 66 | false 67 | 1.8 68 | 1.8 69 | 8 70 | 71 | 72 | 73 | 74 | 75 | commons-io 76 | commons-io 77 | 2.6 78 | test 79 | 80 | 81 | 82 | org.hamcrest 83 | hamcrest-all 84 | 1.3 85 | test 86 | 87 | 88 | 89 | junit 90 | junit 91 | 4.12 92 | test 93 | 94 | 95 | 96 | org.apache.httpcomponents 97 | fluent-hc 98 | 4.5.3 99 | test 100 | 101 | 102 | 103 | 104 | 105 | 106 | 107 | ${basedir}/src/test/resources 108 | false 109 | 110 | **/* 111 | 112 | 113 | 114 | 115 | 116 | ${basedir} 117 | false 118 | 119 | LICENSE 120 | NOTICE.txt 121 | THIRD-PARTY.txt 122 | KEYS 123 | 124 | 125 | 126 | ${basedir}/src/main/resources 127 | false 128 | 129 | static_config/**/*.yml 130 | 131 | 132 | 133 | 134 | 135 | org.apache.maven.plugins 136 | maven-enforcer-plugin 137 | 3.0.0-M2 138 | 139 | 140 | enforce-maven 141 | 142 | enforce 143 | 144 | 145 | 146 | 147 | [3.5.4,) 148 | Maven 3.5.4 or later required 149 | 150 | 151 | 152 | 153 | 154 | enforce-java 155 | 156 | enforce 157 | 158 | 159 | 160 | 161 | [1.11,) 162 | Java 11 or later required to build the plugin 163 | 164 | 165 | 166 | 167 | 168 | 169 | 170 | maven-clean-plugin 171 | 3.1.0 172 | 173 | 174 | 175 | data 176 | 177 | 178 | 179 | 180 | 181 | pl.project13.maven 182 | git-commit-id-plugin 183 | 2.2.6 184 | 185 | 186 | get-the-git-infos 187 | 188 | revision 189 | 190 | 191 | 192 | validate-the-git-infos 193 | 194 | validateRevision 195 | 196 | package 197 | 198 | 199 | 200 | true 201 | 202 | git.build.host 203 | git.commit.user.* 204 | git.build.user.* 205 | 206 | 207 | 208 | 209 | 210 | 211 | 212 | org.apache.maven.plugins 213 | maven-resources-plugin 214 | 3.1.0 215 | 216 | 217 | org.apache.maven.plugins 218 | maven-release-plugin 219 | 2.5.3 220 | 221 | v@{project.version} 222 | false 223 | true 224 | true 225 | false 226 | release 227 | 228 | 229 | 230 | org.apache.maven.plugins 231 | maven-source-plugin 232 | 3.1.0 233 | 234 | 235 | attach-sources 236 | 237 | jar 238 | 239 | 240 | 241 | 242 | 243 | org.apache.maven.plugins 244 | maven-javadoc-plugin 245 | 3.1.0 246 | 247 | ${project.build.sourceEncoding} 248 | en 249 | none 250 | 251 | 252 | 253 | attach-javadocs 254 | 255 | jar 256 | 257 | 258 | -Xdoclint:none 259 | 260 | 261 | 262 | 263 | 264 | org.apache.maven.plugins 265 | maven-gpg-plugin 266 | 1.6 267 | 268 | ${gpg.keyname} 269 | ${gpg.keyname} 270 | 271 | 272 | 273 | sign-artifacts 274 | verify 275 | 276 | sign 277 | 278 | 279 | 280 | 281 | 282 | org.apache.maven.plugins 283 | maven-jar-plugin 284 | 3.1.1 285 | 286 | 287 | **/*cobertura* 288 | **/*jacoco* 289 | 290 | 291 | 292 | true 293 | 294 | 295 | Amazon OpenDistro ElasticSearch Security Parent 296 | ${maven.build.timestamp} 297 | ${git.commit.id} 298 | 299 | 300 | 301 | 302 | 303 | 304 | test-jar 305 | 306 | 307 | 308 | 309 | 310 | org.apache.maven.plugins 311 | maven-compiler-plugin 312 | 3.8.0 313 | 314 | 1.8 315 | 1.8 316 | true 317 | true 318 | -Xlint:unchecked 319 | 320 | 321 | 322 | org.apache.maven.plugins 323 | maven-surefire-plugin 324 | 3.0.0-M3 325 | 326 | 327 | **/*.java 328 | 329 | 330 | 331 | 332 | org.jacoco 333 | jacoco-maven-plugin 334 | 0.8.3 335 | 336 | 337 | maven-assembly-plugin 338 | 3.1.1 339 | 340 | 341 | 342 | 343 | 344 | kr.motd.maven 345 | os-maven-plugin 346 | 1.5.0.Final 347 | 348 | 349 | 350 | 351 | 352 | 353 | release 354 | 355 | 356 | 357 | org.apache.maven.plugins 358 | maven-source-plugin 359 | 360 | 361 | org.apache.maven.plugins 362 | maven-javadoc-plugin 363 | 364 | 365 | org.apache.maven.plugins 366 | maven-gpg-plugin 367 | 368 | 369 | 370 | 371 | 372 | coverage 373 | 374 | 375 | 376 | org.jacoco 377 | jacoco-maven-plugin 378 | 379 | true 380 | 381 | 382 | 383 | agent-for-ut 384 | 385 | prepare-agent 386 | 387 | 388 | 389 | agent-for-it 390 | 391 | prepare-agent-integration 392 | 393 | 394 | 395 | jacoco-site 396 | verify 397 | 398 | report 399 | 400 | 401 | 402 | 403 | 404 | 405 | 406 | 407 | 408 | 409 | https://github.com/opendistro-for-elasticsearch/security-parent 410 | scm:git:git@github.com:opendistro-for-elasticsearch/security-parent.git 411 | scm:git:git@github.com:opendistro-for-elasticsearch/security-parent.git 412 | v1.3.0.0 413 | 414 | 415 | --------------------------------------------------------------------------------