Clear service account token caches
- POST /_security/service/{namespace}/{service}/credential/token/{name}/_clear_cache
Evict a subset of all entries from the service account token caches.
Two separate caches exist for service account tokens: one cache for tokens backed by the service_tokens file, and another for tokens backed by the .security index.
This API clears matching entries from both caches.
The cache for service account tokens backed by the .security index is cleared automatically on state changes of the security index.
The cache for tokens backed by the service_tokens file is cleared automatically on file changes.
- Cluster privileges:
manage_security
Path Parameters
-
namespacestringrequired -
The namespace, which is a top-level grouping of service accounts.
-
servicestringrequired -
The name of the service, which must be unique within its namespace.
-
nameName | Namerequired -
A comma-separated list of token names to evict from the service account token caches. Use a wildcard (
*) to evict all tokens that belong to a service account. It does not support other wildcard patterns.
Response
-
_nodesNodeStatisticsrequired -
failuresErrorCause -
typestringrequired -
The type of error
-
reasonstringnullable -
A human-readable explanation of the error, in English.
-
stack_tracestring -
The server stack trace. Present only if the
error_trace=trueparameter was sent with the request. -
caused_byErrorCause -
root_causeErrorCause -
suppressedErrorCause -
totalnumberrequired -
Total number of nodes selected by the request.
-
successfulnumberrequired -
Number of nodes that responded successfully to the request.
-
failednumberrequired -
Number of nodes that rejected the request or failed to respond. If this value is not 0, a reason for the rejection or failure is included in the response.
-
cluster_namestring Namerequired