Skip to content

Commit c1a46d5

Browse files
authored
Add prisma_cloud data streams to kibana_system role permissions (#138218) (#138277)
Adding logs-prisma_cloud.misconfiguration-* and logs-prisma_cloud.vulnerability-* data stream indices to the kibana_system privileges. This is required for the latest transform to work. (cherry picked from commit 39d2bb8)
1 parent 3852f07 commit c1a46d5

File tree

2 files changed

+4
-0
lines changed

2 files changed

+4
-0
lines changed

x-pack/plugin/core/src/main/java/org/elasticsearch/xpack/core/security/authz/store/KibanaOwnedReservedRoleDescriptors.java

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -527,6 +527,8 @@ static RoleDescriptor kibanaSystem(String name) {
527527
"logs-m365_defender.vulnerability-*",
528528
"logs-microsoft_defender_endpoint.vulnerability-*",
529529
"logs-microsoft_defender_cloud.assessment-*",
530+
"logs-prisma_cloud.misconfiguration-*",
531+
"logs-prisma_cloud.vulnerability-*",
530532
"logs-sentinel_one.application_risk-*"
531533
)
532534
.privileges(

x-pack/plugin/core/src/test/java/org/elasticsearch/xpack/core/security/authz/store/ReservedRolesStoreTests.java

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1720,6 +1720,8 @@ public void testKibanaSystemRole() {
17201720
"logs-m365_defender.vulnerability-" + randomAlphaOfLength(randomIntBetween(0, 13)),
17211721
"logs-microsoft_defender_endpoint.vulnerability-" + randomAlphaOfLength(randomIntBetween(0, 13)),
17221722
"logs-microsoft_defender_cloud.assessment-" + randomAlphaOfLength(randomIntBetween(0, 13)),
1723+
"logs-prisma_cloud.misconfiguration-" + randomAlphaOfLength(randomIntBetween(0, 13)),
1724+
"logs-prisma_cloud.vulnerability-" + randomAlphaOfLength(randomIntBetween(0, 13)),
17231725
"logs-sentinel_one.application_risk-" + randomAlphaOfLength(randomIntBetween(0, 13))
17241726
).forEach(indexName -> {
17251727
final IndexAbstraction indexAbstraction = mockIndexAbstraction(indexName);

0 commit comments

Comments
 (0)