Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[8.15] Fix remote cluster credential secure settings reload (#111535) #111738

Merged
merged 3 commits into from
Sep 17, 2024

Conversation

n1v0lg
Copy link
Contributor

@n1v0lg n1v0lg commented Aug 9, 2024

Backports the following commits to 8.15:

Due to the `cluster:admin/xpack/security` action name prefix, the
internal action
`cluster:admin/xpack/security/remote_cluster_credentials/reload` to
reload remote cluster credentials fails for users that have the `manage`
cluster privilege. This does not align with our documentation and the
overall permission requirements for reloading secure settings.  

This PR renames the action to match the `manage` privilege. Since this
is a local-only action there are no BWC concerns with this rename. 

Fixes: elastic#111543
@n1v0lg n1v0lg added :Security/Authorization Roles, Privileges, DLS/FLS, RBAC/ABAC >bug auto-merge-without-approval Automatically merge pull request when CI checks pass (NB doesn't wait for reviews!) backport Team:Security Meta label for security team test-update-serverless labels Aug 9, 2024
@n1v0lg n1v0lg self-assigned this Aug 9, 2024
@n1v0lg n1v0lg removed auto-merge-without-approval Automatically merge pull request when CI checks pass (NB doesn't wait for reviews!) test-update-serverless labels Aug 9, 2024
@n1v0lg
Copy link
Contributor Author

n1v0lg commented Sep 16, 2024

@elasticmachine update branch

@n1v0lg
Copy link
Contributor Author

n1v0lg commented Sep 17, 2024

@elasticmachine update branch

@n1v0lg n1v0lg added the auto-merge-without-approval Automatically merge pull request when CI checks pass (NB doesn't wait for reviews!) label Sep 17, 2024
@elasticsearchmachine elasticsearchmachine merged commit dc32b36 into elastic:8.15 Sep 17, 2024
20 checks passed
@n1v0lg n1v0lg deleted the backport/8.15/pr-111535 branch September 17, 2024 09:01
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
auto-merge-without-approval Automatically merge pull request when CI checks pass (NB doesn't wait for reviews!) backport >bug :Security/Authorization Roles, Privileges, DLS/FLS, RBAC/ABAC Team:Security Meta label for security team v8.15.2
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants