Missing `run_as` option for update_api_key

[elri]

Summary:

As far as I can tell, the client is missing the feature run_as for updating an apikey.

Would like this an option, maybe as a list (run_as: list[str]) given as an argument to update_api_key

More details:

From the documentation (this is exactly the same for the API and the client):

To update another user’s API key, use the run_as feature to submit a request on behalf of another user.

According to Elastic API documentation on Submitting requests on behalf of other users this is done by adding on a header.

Example

curl -H "es-security-runas-user: jacknich" -u es-admin -X GET http://localhost:9200/

There is no option to add headers or run_as-usernames specifically when calling update_api_key though:

update_api_key(*, id, error_trace=None, expiration=None, filter_path=None, human=None, metadata=None, pretty=None, role_descriptors=None, body=None)

If I didn't miss how the client handles this, I suspect this feature to be unsupported for other functions as well (despite documentation saying otherwise)

[pquentin]

Hello! And sorry for the late reply. As you realized, there's no option to do this right now. However, you can use the perform_request escape hatch that I have just documented here: https://github.com/elastic/elasticsearch-py/blob/eac539dcc301b6062716f1540dc0d1efe888671c/docs/reference/querying.md#unknown-parameters-or-apis. You would then set headers like this:

headers={"content-type": "application/json", "accept": "application/json", "es-security-runas-user": "jacknich"},