Document wildcard prefix matching for principal username/role WLM rules - #12864
Open
dzane17 wants to merge 5 commits into
Open
Document wildcard prefix matching for principal username/role WLM rules#12864dzane17 wants to merge 5 commits into
dzane17 wants to merge 5 commits into
Conversation
… rules Signed-off-by: David Zane <davizane@amazon.com>
dzane17
requested review from
cwperks,
dlvenable,
epugh,
kolchfa-aws,
mgodwan,
peterzhuamazon and
sumobrian
as code owners
July 24, 2026 21:47
|
Thank you for submitting your PR. The PR states are In progress (or Draft) -> Tech review -> Doc review -> Merged. Before you submit your PR for doc review, make sure the content is technically accurate. If you need help finding a tech reviewer, tag a maintainer. When you're ready for doc review, tag the assignee of this PR. The doc reviewer may push edits to the PR directly or leave comments and editorial suggestions for you to address (let us know in a comment if you have a preference). |
Signed-off-by: David Zane <davizane@amazon.com>
Signed-off-by: David Zane <davizane@amazon.com>
Signed-off-by: David Zane <davizane@amazon.com>
kolchfa-aws
reviewed
Jul 28, 2026
kolchfa-aws
reviewed
Jul 28, 2026
kolchfa-aws
reviewed
Jul 28, 2026
Co-authored-by: kolchfa-aws <105444904+kolchfa-aws@users.noreply.github.com> Signed-off-by: kolchfa-aws <105444904+kolchfa-aws@users.noreply.github.com>
kolchfa-aws
added
Doc review
Collaborator
|
Thank you, @dzane17! Is this for 3.8? |
Member
Author
|
@kolchfa-aws This is for 3.9. Thanks |
kolchfa-aws
added
Done but waiting to merge
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Updates the workload group rules attribute table so
principal.usernameandprincipal.roledescribe both exact and trailing-wildcard prefix matching, matching theindex_patternrow. Previously both said "supports exact matching only," which is no longer accurate.index_patternalready documented as exact for a full name, prefix for a value ending in*(per Match index_pattern rules exactly unless value ends in wildcard OpenSearch#22461).principal.username/principal.rolenow documented the same way (per Support wildcard matching in WLM principal username/role rules security#6324).Issues Resolved
Relates to opensearch-project/OpenSearch#22456 and opensearch-project/OpenSearch#22460
Checklist