# Роль
curl -k -u admin:'S0lid-Admin-Password!' -X PUT \
  "https://<IP_OpenSearch>:9200/_plugins/_security/api/roles/fluentbit_writer" \
  -H 'Content-Type: application/json' -d '{
  "index_permissions": [
    { "index_patterns": ["fluentbit-*"], "allowed_actions": ["crud","create_index"] }
  ]
}'

# Пользователь
curl -k -u admin:'S0lid-Admin-Password!' -X PUT \
  "https://<IP_OpenSearch>:9200/_plugins/_security/api/user/fluentbit_ingest" \
  -H 'Content-Type: application/json' -d '{
  "password": "Str0ng-Ingest-Password!",
  "attributes": {}
}'

# Привязка роли
curl -k -u admin:'S0lid-Admin-Password!' -X PUT \
  "https://<IP_OpenSearch>:9200/_plugins/_security/api/rolesmapping/fluentbit_writer" \
  -H 'Content-Type: application/json' -d '{
  "users": ["fluentbit_ingest"]
}'