Skip to content

Commit

Permalink
[Fleet] Added all privilege to kibana_system to logs-fleet_server.* i…
Browse files Browse the repository at this point in the history
…ndex pattern (#106815) (#106863)

* Update KibanaOwnedReservedRoleDescriptors.java

* replaced all with read, delete_index
  • Loading branch information
juliaElastic committed Mar 28, 2024
1 parent 870f662 commit b96c1d5
Showing 1 changed file with 1 addition and 1 deletion.
Expand Up @@ -198,7 +198,7 @@ static RoleDescriptor kibanaSystem(String name) {
// Fleet publishes Agent metrics in kibana task runner
RoleDescriptor.IndicesPrivileges.builder().indices("metrics-fleet_server*").privileges("all").build(),
// Fleet reads output health from this index pattern
RoleDescriptor.IndicesPrivileges.builder().indices("logs-fleet_server*").privileges("read").build(),
RoleDescriptor.IndicesPrivileges.builder().indices("logs-fleet_server*").privileges("read", "delete_index").build(),
// Legacy "Alerts as data" used in Security Solution.
// Kibana user creates these indices; reads / writes to them.
RoleDescriptor.IndicesPrivileges.builder().indices(ReservedRolesStore.ALERTS_LEGACY_INDEX).privileges("all").build(),
Expand Down

0 comments on commit b96c1d5

Please sign in to comment.