[Fleet] Reduce permissions. (#90302)
* Reduce permissions. * Change permissions back. * Reducing permissions on fleet_enroll role - 'write', 'create_index' -> 'auto_configure', 'create_doc' * Remove indices:admin/auto_create from privileges.
This commit is contained in:
parent
57d9dd1419
commit
9870ade971
|
@ -22,17 +22,8 @@ export async function generateOutputApiKey(
|
|||
cluster: ['monitor'],
|
||||
index: [
|
||||
{
|
||||
names: [
|
||||
'logs-*',
|
||||
'metrics-*',
|
||||
'traces-*',
|
||||
'.ds-logs-*',
|
||||
'.ds-metrics-*',
|
||||
'.ds-traces-*',
|
||||
'.logs-endpoint.diagnostic.collection-*',
|
||||
'.ds-.logs-endpoint.diagnostic.collection-*',
|
||||
],
|
||||
privileges: ['write', 'create_index', 'indices:admin/auto_create'],
|
||||
names: ['logs-*', 'metrics-*', 'traces-*', '.logs-endpoint.diagnostic.collection-*'],
|
||||
privileges: ['auto_configure', 'create_doc'],
|
||||
},
|
||||
],
|
||||
},
|
||||
|
|
|
@ -192,17 +192,8 @@ async function putFleetRole(callCluster: CallESAsCurrentUser) {
|
|||
cluster: ['monitor', 'manage_api_key'],
|
||||
indices: [
|
||||
{
|
||||
names: [
|
||||
'logs-*',
|
||||
'metrics-*',
|
||||
'traces-*',
|
||||
'.ds-logs-*',
|
||||
'.ds-metrics-*',
|
||||
'.ds-traces-*',
|
||||
'.logs-endpoint.diagnostic.collection-*',
|
||||
'.ds-.logs-endpoint.diagnostic.collection-*',
|
||||
],
|
||||
privileges: ['write', 'create_index', 'indices:admin/auto_create'],
|
||||
names: ['logs-*', 'metrics-*', 'traces-*', '.logs-endpoint.diagnostic.collection-*'],
|
||||
privileges: ['auto_configure', 'create_doc'],
|
||||
},
|
||||
],
|
||||
},
|
||||
|
|
|
@ -60,17 +60,8 @@ export default function (providerContext: FtrProviderContext) {
|
|||
cluster: ['monitor', 'manage_api_key'],
|
||||
indices: [
|
||||
{
|
||||
names: [
|
||||
'logs-*',
|
||||
'metrics-*',
|
||||
'traces-*',
|
||||
'.ds-logs-*',
|
||||
'.ds-metrics-*',
|
||||
'.ds-traces-*',
|
||||
'.logs-endpoint.diagnostic.collection-*',
|
||||
'.ds-.logs-endpoint.diagnostic.collection-*',
|
||||
],
|
||||
privileges: ['write', 'create_index', 'indices:admin/auto_create'],
|
||||
names: ['logs-*', 'metrics-*', 'traces-*', '.logs-endpoint.diagnostic.collection-*'],
|
||||
privileges: ['auto_configure', 'create_doc'],
|
||||
allow_restricted_indices: false,
|
||||
},
|
||||
],
|
||||
|
|
|
@ -62,15 +62,8 @@ export default function (providerContext: FtrProviderContext) {
|
|||
cluster: ['monitor', 'manage_api_key'],
|
||||
indices: [
|
||||
{
|
||||
names: [
|
||||
'logs-*',
|
||||
'metrics-*',
|
||||
'traces-*',
|
||||
'.ds-logs-*',
|
||||
'.ds-metrics-*',
|
||||
'.ds-traces-*',
|
||||
],
|
||||
privileges: ['write', 'create_index', 'indices:admin/auto_create'],
|
||||
names: ['logs-*', 'metrics-*', 'traces-*'],
|
||||
privileges: ['create_doc', 'indices:admin/auto_create'],
|
||||
allow_restricted_indices: false,
|
||||
},
|
||||
],
|
||||
|
@ -101,17 +94,8 @@ export default function (providerContext: FtrProviderContext) {
|
|||
cluster: ['monitor', 'manage_api_key'],
|
||||
indices: [
|
||||
{
|
||||
names: [
|
||||
'logs-*',
|
||||
'metrics-*',
|
||||
'traces-*',
|
||||
'.ds-logs-*',
|
||||
'.ds-metrics-*',
|
||||
'.ds-traces-*',
|
||||
'.logs-endpoint.diagnostic.collection-*',
|
||||
'.ds-.logs-endpoint.diagnostic.collection-*',
|
||||
],
|
||||
privileges: ['write', 'create_index', 'indices:admin/auto_create'],
|
||||
names: ['logs-*', 'metrics-*', 'traces-*', '.logs-endpoint.diagnostic.collection-*'],
|
||||
privileges: ['auto_configure', 'create_doc'],
|
||||
allow_restricted_indices: false,
|
||||
},
|
||||
],
|
||||
|
|
Loading…
Reference in a new issue