Create explicit (least-privilege) authpols for Elasticsearch
Currently we have an elasticsearch authpol that allows inbound traffic from any source to Elasticsearch on 9200.
This doesn't align with Big Bang's practice of being as specific as possible with our policies.
-
Delete the current es-allow-elasticsearch
authpol -
Determine which services need their own authpol (Fluentbit, Fluentd, others?) -
Create new authpols for the specific servicees