80_api_key_cross_cluster.yml

---
requires:
  stack: true
  serverless: false
---
setup:
  - do:
      security.put_role:
        name: "admin_role"
        body: >
          {
            "cluster": ["manage_security"]
          }

  - do:
      security.put_user:
        username: "admin_user"
        body: >
          {
            "password" : "x-pack-test-password",
            "roles" : [ "admin_role" ],
            "full_name" : "Admin user"
          }
---
teardown:
  - do:
      security.delete_role:
        name: "admin_role"
        ignore: 404

  - do:
      security.delete_user:
        username: "admin_user"
        ignore: 404
---
'Cross-cluster API keys':
  - do:
      headers:
        Authorization: "Basic YWRtaW5fdXNlcjp4LXBhY2stdGVzdC1wYXNzd29yZA==" # admin_user
      security.create_cross_cluster_api_key:
        body: >
          {
            "name": "my-cc-api-key",
            "expiration": "1d",
            "access": {
              "search": [
                {
                  "names": ["logs*"]
                }
              ],
              "replication": [
                {
                  "names": ["archive"],
                  "allow_restricted_indices": false
                }
              ]
            },
            "metadata": {
              "answer": 42,
              "tag": "dev"
            }
          }
  - match: { name: "my-cc-api-key" }
  - is_true: id
  - is_true: api_key
  - is_true: expiration
  - set: { id: api_key_id }

  - do:
      headers:
        Authorization: "Basic YWRtaW5fdXNlcjp4LXBhY2stdGVzdC1wYXNzd29yZA==" # admin_user
      security.update_cross_cluster_api_key:
        id: "$api_key_id"
        body: >
          {
            "access": {
              "replication": [
                {
                  "names": ["archive"]
                }
              ]
            },
            "metadata": { "tag": "prod" }
          }
  - match: { updated: true }