Security - kibana_system - add delete privileges for synthetics #85844
Conversation
elasticsearchmachine
added
v8.3.0
external-contributor
dominiqueclarke
added
:Security/Authentication
|
Pinging @elastic/es-security (Team:Security) |
dominiqueclarke
changed the title
|
ping @elastic/kibana-security |
| @@ -777,7 +777,13 @@ public static RoleDescriptor kibanaSystemRoleDescriptor(String name) { | |||
| "metrics-apm-*", | |||
| "metrics-apm.*-*", | |||
| "traces-apm-*", | |||
| "traces-apm.*-*" | |||
| "traces-apm.*-*", | |||
There was a problem hiding this comment.
nit: it'd make sense to mention Synthetics in the comment above.
| "synthetics-http-*", | ||
| "synthetics-icmp-*", | ||
| "synthetics-tcp-*", | ||
| "synthetics-browser-*", | ||
| "synthetics-browser.network-*", | ||
| "synthetics-browser.screenshot-*" |
There was a problem hiding this comment.
question: do we document these patterns anywhere like we do for APM patterns (dataset part in particular, http/icmp/tcp/browser/browser.network/browser.screenshot)? I wanted to make sure there are no typos in the names and so on, but couldn't quickly find any references.
There was a problem hiding this comment.
Unfortunately no, we do have this docs ticket where we will address in the future elastic/synthetics#286
There was a problem hiding this comment.
Confirmed this matches the needs of the new ILM policies added in elastic/integrations#2744
|
@azasypkin @joshdover I'm not a ES contributor, so I'm hoping one of you can tell me what Also, I have not updated this branch in a week. Do I need to merge upstream similar to Kibana? |
|
@elasticmachine update branch |
|
@dominiqueclarke The above "update branch" should most likely fixes the CI failure. |
dominiqueclarke
deleted the
feature/security-kibana_system-synthetics-delete
branch
Resolves elastic/uptime#467
As part of elastic/uptime#462, Uptime will introduce default ILM policies with default delete phases for the
synthetics-http,synthetics-tcp,synthetics-icmp,synthetics-brower,synthetics-browser.networkandsynthetics-browser.screenshotdata sets.To support this work, the Kibana system user must have extended privileges to delete data streams associated with these data sets.