Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Uptime] Change API access to new authz authorization paradigm #203319

Closed
jasonrhodes opened this issue Dec 6, 2024 · 3 comments · Fixed by #203415
Closed

[Uptime] Change API access to new authz authorization paradigm #203319

jasonrhodes opened this issue Dec 6, 2024 · 3 comments · Fixed by #203415
Assignees
Labels
Team:obs-ux-management Observability Management User Experience Team

Comments

@jasonrhodes
Copy link
Member

Authorization for API endpoints must be migrated away from the previous use of options.tags: ["access:some_tag"] and replaced with a new security.authz object. Information can be found here: https://docs.elastic.dev/kibana-dev-docs/key-concepts/security-api-authorization

Note: this should not be confused with the options.access value that is still used to indicate whether an API route is internal or public.

List of uptime routes

Full list of routes in need of manual migration can be found in these issues:

Route Current tag(s)
/internal/uptime/pings access:uptime-read
/internal/uptime/index_status access:uptime-read
/internal/uptime/monitor/details access:uptime-read
/internal/uptime/monitor/locations access:uptime-read
/internal/uptime/monitor/list access:uptime-read
/internal/uptime/monitor/status access:uptime-read
/internal/uptime/snapshot/count access:uptime-read
/internal/uptime/ping/histogram access:uptime-read
/internal/uptime/monitor/duration access:uptime-read
/internal/uptime/journey/{checkGroup} access:uptime-read
/internal/uptime/journey/screenshot/{checkGroup}/{stepIndex} access:uptime-read
/internal/uptime/network_events access:uptime-read
/internal/uptime/journeys/failed_steps access:uptime-read
/internal/uptime/synthetics/check/success access:uptime-read
/internal/uptime/journey/screenshot/block access:uptime-read
/internal/uptime/service/locations access:uptime-read

For an example of this migration, see the PR that migrates all SLO routes

@jasonrhodes jasonrhodes added the Team:obs-ux-management Observability Management User Experience Team label Dec 6, 2024
@elasticmachine
Copy link
Contributor

Pinging @elastic/obs-ux-management-team (Team:obs-ux-management)

@fkanout
Copy link
Contributor

fkanout commented Dec 9, 2024

Mostly covered in this PR and now it's completed by this one

@jasonrhodes
Copy link
Member Author

Thanks, @fkanout -- I was under the impression that everything mentioned in this issue was not able to be auto-migrated and required us to manually migrate, not sure why this isn't the case (it creates extra work and distraction for us, unfortunately). I've asked about it here.

fkanout added a commit that referenced this issue Dec 10, 2024
CAWilson94 pushed a commit to CAWilson94/kibana that referenced this issue Dec 12, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Team:obs-ux-management Observability Management User Experience Team
Projects
None yet
Development

Successfully merging a pull request may close this issue.

3 participants