-
Notifications
You must be signed in to change notification settings - Fork 25k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Add read privileges for observability-annotations for apm_user #58530
Add read privileges for observability-annotations for apm_user #58530
Conversation
Lgtm but you'll need someone from the ES side to 👍 this too. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I'm happy with with the intent of the change, but we need to also update ReservedRolesStoreTests.testAPMUserRole
to reflect the change.
@tvernum I've added a test - LMK if that's good enough. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM
Pinging @elastic/es-security (:Security/Authentication) |
@dgieselaar I added labels, including version labels. Can you confirm that they reflect the releases you intend to target? |
@tvernum we'd also like to get this in for 7.8.1, is that possible? |
That's fine. I've updated the labels. |
thanks @tvernum! Ok for me to merge & backport? |
Yes, go ahead. |
Co-authored-by: Elastic Machine <[email protected]>
Closes elastic/kibana#69642. See also elastic/kibana#69881.
In elastic/kibana#64796, we added support for annotations (and a public API to create them) in the APM UI. Annotations are stored (by default, but configurable) in
observability-annotations
. We've documented that users need access to theobservability-annotations
index to create annotations via the API, but neglected to do so for using the UI.To ensure a great out-of-the-box experience we'd like to add read privileges for this index by default.