Creates an API key for access without requiring basic authentication.
The API keys are created by the Elasticsearch API key service, which is automatically enabled
when you configure TLS on the HTTP interface. See Encrypting HTTP Client communications. Alternatively,
you can explicitly enable the xpack.security.authc.api_key.enabled
setting. When
you are running in production mode, a bootstrap check prevents you from enabling
the API key service unless you also enable TLS on the HTTP interface.
A successful create API key API call returns a JSON structure that contains the API key, its unique id, and its name. If applicable, it also returns expiration information for the API key in milliseconds.
By default, API keys never expire. You can specify expiration information when you create the API keys.
See API key service settings for configuration settings related to API key service.
The following parameters can be specified in the body of a POST or PUT request:
name
role_descriptors
(required)
expiration
The following example creates an API key:
POST /_security/api_key { "name": "my-api-key", "expiration": "1d", "role_descriptors": { "role-a": { "cluster": ["all"], "index": [ { "names": ["index-a*"], "privileges": ["read"] } ] }, "role-b": { "cluster": ["all"], "index": [ { "names": ["index-b*"], "privileges": ["all"] } ] } } }
optional expiration for the API key being generated. If expiration is not provided then the API keys do not expire. | |
optional role descriptors for this API key, if not provided then permissions of authenticated user are applied. |
A successful call returns a JSON structure that provides API key information.
{ "id":"VuaCfGcBCdbkQm-e5aOx", "name":"my-api-key", "expiration":1544068612110, "api_key":"ui2lp2axTNmsyakw9tvNnw" }
The API key returned by this API can then be used by sending a request with a
Authorization
header with a value having the prefix ApiKey ` followed
by the _credentials_, where _credentials_ is the base64 encoding of `id
and api_key
joined by a colon.
curl -H "Authorization: ApiKey VnVhQ2ZHY0JDZGJrUW0tZTVhT3g6dWkybHAyYXhUTm1zeWFrdzl0dk5udw==" http://localhost:9200/_cluster/health