es访问权限不受限制安全漏洞修复

1.查看es版本 下载对应的版本插件

https://readonlyrest.com/download/ 

 2. 将配置文件readonlyest.yml文件放入到es的config文件夹中

readonlyrest:
   enable: true
   access_control_rules:
   - name: Full access with HTTP auth
     auth_key: admin:123456
     type: allow
   - name: "allow anything from ip"
     #hosts_local: ["10.187.97.148","10.187.97.147","10.187.98.99","10.187.98.35","10.187.98.46","10.187.98.45","10.187.98.44"]
     hosts: ["10.187.0.0/16"]
     type: allow