updating security.authz for SessionView and Kubernetes Dashboard

elastic · Nov 14, 2024 · 4ab648c · 4ab648c
1 parent 03b837c
commit 4ab648c
Show file tree

Hide file tree

Showing 8 changed files with 8 additions and 13 deletions.
diff --git a/x-pack/plugins/kubernetes_security/server/routes/aggregate.ts b/x-pack/plugins/kubernetes_security/server/routes/aggregate.ts
@@ -40,8 +40,7 @@ export const registerAggregateRoute = (router: IRouter, logger: Logger) => {
         version: '1',
         security: {
           authz: {
-            enabled: false,
-            reason: 'This route is opted out from authorization',
+            requiredPrivileges: ['securitySolution'],
           },
         },
         validate: {

diff --git a/x-pack/plugins/kubernetes_security/server/routes/count.ts b/x-pack/plugins/kubernetes_security/server/routes/count.ts
@@ -30,8 +30,7 @@ export const registerCountRoute = (router: IRouter, logger: Logger) => {
         version: '1',
         security: {
           authz: {
-            enabled: false,
-            reason: 'This route is opted out from authorization',
+            requiredPrivileges: ['securitySolution'],
           },
         },
         validate: {

diff --git a/x-pack/plugins/kubernetes_security/server/routes/multi_terms_aggregate.ts b/x-pack/plugins/kubernetes_security/server/routes/multi_terms_aggregate.ts
@@ -37,8 +37,7 @@ export const registerMultiTermsAggregateRoute = (router: IRouter, logger: Logger
         version: '1',
         security: {
           authz: {
-            enabled: false,
-            reason: 'This route is opted out from authorization',
+            requiredPrivileges: ['securitySolution'],
           },
         },
         validate: {

diff --git a/x-pack/plugins/session_view/server/routes/alert_status_route.ts b/x-pack/plugins/session_view/server/routes/alert_status_route.ts
@@ -33,8 +33,7 @@ export const registerAlertStatusRoute = (
         version: '1',
         security: {
           authz: {
-            enabled: false,
-            reason: 'This route is opted out from authorization',
+            requiredPrivileges: ['securitySolution'],
           },
         },
         validate: {

diff --git a/x-pack/plugins/session_view/server/routes/alerts_route.ts b/x-pack/plugins/session_view/server/routes/alerts_route.ts
@@ -38,8 +38,7 @@ export const registerAlertsRoute = (
         version: '1',
         security: {
           authz: {
-            enabled: false,
-            reason: 'This route is opted out from authorization',
+            requiredPrivileges: ['securitySolution'],
           },
         },
         validate: {

diff --git a/x-pack/plugins/session_view/server/routes/get_total_io_bytes_route.ts b/x-pack/plugins/session_view/server/routes/get_total_io_bytes_route.ts
@@ -25,7 +25,7 @@ export const registerGetTotalIOBytesRoute = (router: IRouter, logger: Logger) =>
         security: {
           authz: {
             enabled: false,
-            reason: 'This route is opted out from authorization',
+            reason: `This route delegates authorization to Elasticsearch and it's not tied to a Kibana privilege.`,
           },
         },
         validate: {

diff --git a/x-pack/plugins/session_view/server/routes/io_events_route.ts b/x-pack/plugins/session_view/server/routes/io_events_route.ts
@@ -32,7 +32,7 @@ export const registerIOEventsRoute = (router: IRouter, logger: Logger) => {
         security: {
           authz: {
             enabled: false,
-            reason: 'This route is opted out from authorization',
+            reason: `This route delegates authorization to Elasticsearch and it's not tied to a Kibana privilege.`,
           },
         },
         validate: {

diff --git a/x-pack/plugins/session_view/server/routes/process_events_route.ts b/x-pack/plugins/session_view/server/routes/process_events_route.ts
@@ -46,7 +46,7 @@ export const registerProcessEventsRoute = (
         security: {
           authz: {
             enabled: false,
-            reason: 'This route is opted out from authorization',
+            reason: `This route delegates authorization to Elasticsearch and it's not tied to a Kibana privilege.`,
           },
         },
         validate: {