Skip to content

[Fleet] add index privileges to support reroute processor #129692

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 6 commits into from
Jun 20, 2025

Conversation

juliaElastic
Copy link
Contributor

@juliaElastic juliaElastic commented Jun 19, 2025

Closes elastic/kibana#224200

Add additional index privileges to fleet-server service account to enable reroute processor to work on these index patterns (logs, logs.*)

  • Have you signed the contributor license agreement? yes
  • Have you followed the contributor guidelines? yes
  • If submitting code, have you built your formula locally prior to submission with gradle check? yes
  • If submitting code, is your pull request against main? Unless there is a good reason otherwise, we prefer pull requests against main and will backport as needed.
  • If submitting code, have you checked that your submission is for an OS and architecture that we support? yes
  • If you are submitting this code for a class then read our policy for that.

@elasticsearchmachine elasticsearchmachine added v9.1.0 external-contributor Pull request authored by a developer outside the Elasticsearch team labels Jun 19, 2025
@juliaElastic juliaElastic added >non-issue :Core/Infra/Plugins Plugin API and infrastructure labels Jun 19, 2025
@juliaElastic juliaElastic marked this pull request as ready for review June 19, 2025 08:03
@elasticsearchmachine elasticsearchmachine added the Team:Core/Infra Meta label for core/infra team label Jun 19, 2025
@elasticsearchmachine
Copy link
Collaborator

Pinging @elastic/es-core-infra (Team:Core/Infra)

@juliaElastic juliaElastic requested a review from a team June 19, 2025 11:19
@@ -118,6 +118,8 @@ public class ServiceAccountIT extends ESRestTestCase {
"indices": [
{
"names": [
"logs",
"logs.*",
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Seeing that we also have metrics-* and traces-* here, should we also add metrics, metrics.*, traces and traces.*?

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

It seems we only need for logs for now: elastic/kibana#224200 (comment)

Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

If we keep using the reroute processor I guess it is a matter of time to use it with metrics too. But ok, we can add it when this happens.

@juliaElastic juliaElastic merged commit 4aa83e2 into elastic:main Jun 20, 2025
27 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
:Core/Infra/Plugins Plugin API and infrastructure external-contributor Pull request authored by a developer outside the Elasticsearch team >non-issue Team:Core/Infra Meta label for core/infra team v9.1.0
Projects
None yet
Development

Successfully merging this pull request may close these issues.

[Fleet] Reroute permissions do not work
3 participants