fix #304, adds support for aws iam

Author: cars10

.yarn/install-state.gz

@@ -1,5 +1,11 @@
 # Changelog
 
+## 1.8.0
+
+* adds support for connecting to elasticsearch with aws iam credentials, fixes [#304](https://github.com/cars10/elasticvue/pull/304)
+, thanks @ChrisMcKee
+* automatically import predefined clusters when using docker, fixes [#254](https://github.com/cars10/elasticvue/issues/254)
+
 ## 1.7.0
 
 * adds copy button to CORS settings

CHANGELOG.md

@@ -59,6 +59,7 @@ RUN apt-get update \
                           libxdo-dev \
                           libayatana-appindicator3-dev \
                           librsvg2-dev \
+                          xdg-utils \
     && apt-get install -y /tmp/ubuntu-packages/*.deb \
     && rm -rf /tmp/ubuntu-packages \
     && apt-get clean \

docker/Dockerfile_tauri

@@ -31,6 +31,7 @@
     "@tauri-apps/plugin-opener": "^2.3.0",
     "@tauri-apps/plugin-process": "^2.2.2",
     "@tauri-apps/plugin-updater": "^2.8.1",
+    "aws4fetch": "^1.0.20",
     "codemirror": "^6.0.2",
     "idb": "^8.0.3",
     "json-bigint": "^1.0.0",

package.json

@@ -0,0 +1,11 @@
+# Localstack Setup for ES
+
+* Start localstack container by running `docker compose up` in this folder
+    * During creation the `init-iam-es.sh` script will run creating the initial domain and user
+* Once it's finished running get the credentials by calling docker exec localstack cat /tmp/es_user_credentials.json
+* In elasticvue
+    * Add new cluster
+    * Set the Access Key ID and Secret Key to the ones from the `es_user_credentials.json`
+    * Set the region to us-east-1
+    * Set the URI to `http://127.0.0.1:4566/es/us-east-1/my-domain`
+    * Click Connect

scripts/localstack/README.md

@@ -0,0 +1,25 @@
+services:
+  localstack:
+    image: localstack/localstack:latest
+    container_name: localstack
+    ports:
+      - "4566:4566"             # LocalStack edge
+      - "4510-4559:4510-4559"   # external-service port range
+    environment:
+      - SERVICES=iam,sts,es
+      - DEFAULT_REGION=us-east-1
+      - DATA_DIR=/var/lib/localstack
+      - ES_ENDPOINT_STRATEGY=path
+      - OPENSEARCH_ENDPOINT_STRATEGY=path
+      - DEBUG=1
+      - EXTERNAL_SERVICE_PORTS_START=4510         # inclusive
+      - EXTERNAL_SERVICE_PORTS_END=4559           # exclusive
+      - EXTRA_CORS_ALLOWED_ORIGINS=http://localhost:5173,http://localhost:5174,http://localhost:9200
+      - EXTRA_CORS_ALLOWED_HEADERS=x-api-key
+    volumes:
+      - localstack_data:/var/lib/localstack
+      - ./init-iam-es.sh:/etc/localstack/init/ready.d/init-iam-es.sh
+      - /var/run/docker.sock:/var/run/docker.sock
+
+volumes:
+  localstack_data:

scripts/localstack/compose.yml

@@ -0,0 +1,27 @@
+#!/usr/bin/env bash
+set -e
+
+awslocal es create-elasticsearch-domain --domain-name my-domain
+
+awslocal iam create-user --user-name es_user
+
+awslocal iam put-user-policy \
+  --user-name es_user \
+  --policy-name es_full_access \
+  --policy-document '{
+    "Version": "2012-10-17",
+    "Statement": [
+      {
+        "Effect": "Allow",
+        "Action": "es:*",
+        "Resource": "*"
+      }
+    ]
+  }'
+
+awslocal iam create-access-key --user-name es_user \
+  > /tmp/es_user_credentials.json
+
+echo "Elasticsearch domain 'my-domain' created."
+echo "IAM user 'es_user' created with ES-full-access policy."
+echo "Credentials written to /tmp/es_user_credentials.json"