How to cofigure roles.yml and role-mapping.yml in pki

[sudak (sudakk)]

Hi I am new to elasticsearch . I have configured pki  for authentication and have set roles.yml and role_mapping. But i am getting " failed to parse indices privileges for role [user]. missing required [privileges] field. skipping role.."

roles.yml 

user:
    cluster: [ 'monitor' ]
    indices:
        - names: ['bank']
        privileges: ['read','write']

role-mapping.yml looks like

user:
   - "cn=something, ou=Consulting Team, dc=mydomain, dc=com"

this is how elasticsearch.yml looks like

xpack.license.self_generated.type: trial
xpack.security.enabled: true
xpack.security.transport.ssl.enabled: true
xpack.security.transport.ssl.verification_mode: certificate
xpack.security.transport.ssl.keystore.path: certs/elastic-certificates.p12
xpack.security.transport.ssl.truststore.path: certs/elastic-certificates.p12
xpack.security.http.ssl.enabled: true
xpack.security.http.ssl.keystore.path: certs/elastic-certificates.p12
xpack.security.http.ssl.truststore.path: certs/elastic-certificates.p12
xpack.security.http.ssl.client_authentication: optional
xpack.security.authc.realms.pki1.type: pki

What is the problem here? can you please help

[TimV (Tim Vernum)]

Hi @sudak
Would you mind fixing up the formatting of your post?

It seems that you've included some of your description in the code blocks (surrounded by "```") so it's hard to follow what you're describing.