From 02dabf6fb1b8718cc16add369eaed380575d837f Mon Sep 17 00:00:00 2001
From: Antoine Cotten <hello@acotten.com>
Date: Wed, 2 Mar 2022 16:34:48 +0100
Subject: [PATCH] fix(logstash): Allow managing "logstash" index

When data streams are disabled in Logstash's "elasticsearch" output
('data_stream => false'), Logstash falls back to managing "logstash-*"
indices and creates an index template with ILM enabled.
In this process, a write index for the alias "logstash" is created. This
step requires the "manage" privilege on the "logstash" alias.

Fixes #679
---
 setup/roles/logstash_writer.json | 9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/setup/roles/logstash_writer.json b/setup/roles/logstash_writer.json
index 6c857a8..7cd38fc 100644
--- a/setup/roles/logstash_writer.json
+++ b/setup/roles/logstash_writer.json
@@ -17,6 +17,15 @@
         "manage",
         "manage_ilm"
       ]
+    },
+    {
+      "names": [
+        "logstash"
+      ],
+      "privileges": [
+        "write",
+        "manage"
+      ]
     }
   ]
 }