Document the Elasticsearch permissions required by Temporal

Open
#1,821 0 comments 2 reactions 2 assignees View on GitHub

@flossypurse is already working on this.

Since Oct 13, 2021.

Assessment

This issue has not been assessed yet.

Description

enhancement

Is your feature request related to a problem? Please describe.
We were recently debugging an issue in our QA environment where our workflows were failing trying to execute a ListWorkflowExecutionsRequest (in java). It turns out the Elasticsearch cluster we had setup for temporal had restrictive permissions which was leading to 403's when temporal tried to query Elasticsearch. We temporarily resolved the issue by opening up permissions between Temporal and ES.

Describe the solution you'd like
We do not want to leave the ES permission open, so a documentation update as to which permissions are required by Temporal would be amazing.

Describe alternatives you've considered
Currently our fix was to make ES open for the Temporal cluster, but this is not sustainable for us.

Additional context
Original slack thread: https://temporalio.slack.com/archives/CTRCR8RBP/p1627509370447100

Dominant language
Go
Stars
23.2k
Forks
1.9k
Avg merge
2d 8h
Merged PRs (30d)
228

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

More from temporalio/temporal

All issues in temporalio/temporal

Similar issues

More Go issues

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.