Skip to content

Conversation

@williamrandolph
Copy link
Contributor

We added a Logstash xpack plugin that can access system indices in #53350, but we didn't hook it into security roles. This PR will update the current logstash_admin role so that the role allows both the old direct access to .logstash-* indexes as well as the use of the new plugin.

Closes #63133

Copy link
Contributor

@gwbrown gwbrown left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM, thanks!

@gwbrown gwbrown self-assigned this Oct 7, 2020
@gwbrown gwbrown changed the title WIP: Update logstash_admin role for system indices Update logstash_admin role for system indices Oct 7, 2020
@gwbrown gwbrown merged commit 1e741e8 into elastic:master Oct 7, 2020
@gwbrown gwbrown added :Core/Infra/Core Core issues without another label >non-issue v7.10.0 v8.0.0 labels Oct 7, 2020
@elasticmachine
Copy link
Collaborator

Pinging @elastic/es-core-infra (:Core/Infra/Core)

@elasticmachine elasticmachine added the Team:Core/Infra Meta label for core/infra team label Oct 7, 2020
gwbrown added a commit that referenced this pull request Oct 7, 2020
This PR updates the `logstash_admin` role to include the recently-added Logstash Pipeline Management APIs, as well as access to the `.logstash*` index pattern.

Co-authored-by: William Brafford <[email protected]>
@williamrandolph williamrandolph deleted the logstash-sys-index-security-role branch May 23, 2022 17:25
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

:Core/Infra/Core Core issues without another label >non-issue Team:Core/Infra Meta label for core/infra team v7.10.0 v8.0.0-alpha1

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Security updates for logstash system index APIs

4 participants