AssociatedUserLabels returns labels matching associated users for the given es resource.

ReconcileUsersAndRoles fetches all users and roles and aggregates them into a single Kubernetes secret mounted in the Elasticsearch Pods.

RolesFileRealmSecretKey returns a reference to the K8s secret holding the roles and file realm data.

UserProvidedFileRealmWatchName returns the watch registered for user-provided file realm secrets.

UserProvidedRolesWatchName returns the watch registered for user-provided roles secrets.

ApmAgentUserRole is the name of the role used by APMServer instances to connect to Kibana.

ApmUserRoleV6 is the name of the role used by 6.8.x APMServer instances to connect to Elasticsearch.

ApmUserRoleV7 is the name of the role used by APMServer instances to connect to Elasticsearch from version 7.1 to 7.4 included.

ApmUserRoleV75 is the name of the role used by APMServer instances to connect to Elasticsearch from version 7.5.

ApmUserRoleV80 is the name of the role used by APMServer instances to connect to Elasticsearch from version 8.0.

ApmUserRoleV87 is the name of the role used by APMServer instances to connect to Elasticsearch from version 8.7.

AssociatedUserType is used to annotate an associated user secret, most likely created by an association controller.

ClusterManageRole is the name of a custom role to manage the cluster.

ControllerUserName is the controller user to interact with ES.

DiagnosticsUserName is used for the ECK diagnostics.

DiagnosticsUserRoleV80 is the name of the built-in role for ECK diagnostics use from version 8.0 to 8.4.

DiagnosticsUserRoleV85 is the name of the built-in role for ECK diagnostics use from version 8.5.

ElasticUserName is the public-facing user.

MonitoringUserName is used for the Elasticsearch monitoring.

PasswordHashField is the field in the secret that contains the hash of the password.

PreStopUserName is used for API interactions from the pre-stop Pod lifecycle hook.

ProbeUserName is used for the Elasticsearch readiness probe.

ProbeUserRole is the name of the role used by the internal probe user.

RemoteMonitoringCollectorBuiltinRole is the name of the built-in remote_monitoring_collector role.

RolesFile is the name of the roles file in the ES config dir.

ServiceAccountTokenType is used to annotate a secret that contains a service account token, most likely created by an association controller.

StackMonitoringMetricsUserRole is the name of the role used by Metricbeat and Filebeat to send metrics and log data to the monitoring Elasticsearch cluster when Stack Monitoring is enabled.

SuperUserBuiltinRole is the name of the built-in superuser role.

UserNameField is the field in the secret that contains the username.

UserRolesField is the field in the secret that contains the roles for the user as a comma separated list of strings.

V70 indicates version 7.0.

V73 indicates version 7.3.

V75 indicates version 7.5.

V77 indicates version 7.7.

Additional index permissions for Beats users.

PredefinedRoles to create for internal needs.

AssociatedUser represents an Elasticsearch user associated with another resource (eg.

RolesFileContent is a map {role name -> yaml role spec}.