diff --git a/x-pack/plugins/task_manager/server/routes/background_task_utilization.ts b/x-pack/plugins/task_manager/server/routes/background_task_utilization.ts index 43cc2a69fe11c..58c89a5bc8740 100644 --- a/x-pack/plugins/task_manager/server/routes/background_task_utilization.ts +++ b/x-pack/plugins/task_manager/server/routes/background_task_utilization.ts @@ -111,6 +111,13 @@ export function backgroundTaskUtilizationRoute( router.get( { path: `/${routeOption.basePath}/task_manager/_background_task_utilization`, + security: { + authz: { + enabled: false, + reason: + 'This route is opted out from authorization. It can be accessed with JWT credentials.', + }, + }, // Uncomment when we determine that we can restrict API usage to Global admins based on telemetry // options: { tags: ['access:taskManager'] }, validate: false, diff --git a/x-pack/plugins/task_manager/server/routes/health.ts b/x-pack/plugins/task_manager/server/routes/health.ts index 7bcebfabdca60..694bcef1dc053 100644 --- a/x-pack/plugins/task_manager/server/routes/health.ts +++ b/x-pack/plugins/task_manager/server/routes/health.ts @@ -139,6 +139,14 @@ export function healthRoute(params: HealthRouteParams): { router.get( { path: '/api/task_manager/_health', + security: { + authz: { + enabled: false, + // https://github.com/elastic/kibana/issues/136157 + reason: + 'This route is opted out from authorization. Authorization is planned but not implemented yet(breaking change).', + }, + }, // Uncomment when we determine that we can restrict API usage to Global admins based on telemetry // options: { tags: ['access:taskManager'] }, validate: false, diff --git a/x-pack/plugins/task_manager/server/routes/metrics.ts b/x-pack/plugins/task_manager/server/routes/metrics.ts index 808675f25818b..bd2b912fe9469 100644 --- a/x-pack/plugins/task_manager/server/routes/metrics.ts +++ b/x-pack/plugins/task_manager/server/routes/metrics.ts @@ -48,6 +48,13 @@ export function metricsRoute(params: MetricsRouteParams) { router.get( { path: `/api/task_manager/metrics`, + security: { + authz: { + enabled: false, + reason: + 'This route is opted out from authorization. It can be accessed with JWT credentials.', + }, + }, options: { access: 'public', // The `security:acceptJWT` tag allows route to be accessed with JWT credentials. It points to diff --git a/x-pack/plugins/triggers_actions_ui/server/data/routes/fields.ts b/x-pack/plugins/triggers_actions_ui/server/data/routes/fields.ts index 677d90066f182..a5bd9931aae12 100644 --- a/x-pack/plugins/triggers_actions_ui/server/data/routes/fields.ts +++ b/x-pack/plugins/triggers_actions_ui/server/data/routes/fields.ts @@ -29,6 +29,13 @@ export function createFieldsRoute(logger: Logger, router: IRouter, baseRoute: st router.post( { path, + security: { + authz: { + enabled: false, + reason: + 'This route is opted out of authorization as it relies on ES authorization instead.', + }, + }, validate: { body: bodySchema, }, diff --git a/x-pack/plugins/triggers_actions_ui/server/data/routes/indices.ts b/x-pack/plugins/triggers_actions_ui/server/data/routes/indices.ts index ddca5d8f1dd6b..2e42016659d88 100644 --- a/x-pack/plugins/triggers_actions_ui/server/data/routes/indices.ts +++ b/x-pack/plugins/triggers_actions_ui/server/data/routes/indices.ts @@ -33,6 +33,13 @@ export function createIndicesRoute(logger: Logger, router: IRouter, baseRoute: s router.post( { path, + security: { + authz: { + enabled: false, + reason: + 'This route is opted out of authorization as it relies on ES authorization instead.', + }, + }, validate: { body: bodySchema, }, diff --git a/x-pack/plugins/triggers_actions_ui/server/data/routes/time_series_query.ts b/x-pack/plugins/triggers_actions_ui/server/data/routes/time_series_query.ts index f549e46576939..956631a1d2726 100644 --- a/x-pack/plugins/triggers_actions_ui/server/data/routes/time_series_query.ts +++ b/x-pack/plugins/triggers_actions_ui/server/data/routes/time_series_query.ts @@ -28,6 +28,13 @@ export function createTimeSeriesQueryRoute( router.post( { path, + security: { + authz: { + enabled: false, + reason: + 'This route is opted out of authorization as it relies on ES authorization instead.', + }, + }, validate: { body: TimeSeriesQuerySchema, },