Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[APM] Manual migration for routes with access tags #203792

Closed
crespocarlos opened this issue Dec 11, 2024 · 1 comment · Fixed by #204058
Closed

[APM] Manual migration for routes with access tags #203792

crespocarlos opened this issue Dec 11, 2024 · 1 comment · Fixed by #204058
Assignees
@iblancof
Labels
Team:obs-ux-infra_services Observability Infrastructure & Services User Experience Team technical debt Improvement of the software architecture and operational architecture v9.0.0

Comments

@crespocarlos
Copy link
Contributor

crespocarlos commented Dec 11, 2024 •
edited by iblancof
Loading

Summary

by 31/Dec

APM routes are defined with tag: 'access: <privilege_1>'.

These routes could not be automatically migrated, and instead require teams to manually migrate to the new authorization system. See the developer documentation for more details.

These are the access tags currently used in APM that need to be migrated:

  • access:apm
  • access:apm_write
  • access:apm_settings_write
  • access:ml:canGetJobs
  • access:ml:canCreateJob
  • access:ml:canCloseJob
  • access:ai_assistant

Example of what needs to be done: #202817

AC

  • access tag is replaced with new authorization API
@crespocarlos crespocarlos added technical debt Improvement of the software architecture and operational architecture v9.0.0 Team:obs-ux-infra_services Observability Infrastructure & Services User Experience Team labels Dec 11, 2024
@elasticmachine
Copy link
Contributor

Pinging @elastic/obs-ux-infra_services-team (Team:obs-ux-infra_services)

@iblancof iblancof self-assigned this Dec 12, 2024
@iblancof iblancof mentioned this issue Dec 12, 2024
Merged
kibanamachine pushed a commit to kibanamachine/kibana that referenced this issue Dec 13, 2024
@iblancof
[APM] Update deprecated access tags to the new security configuration…
daf477e 
… in routes (elastic#204058)

## Summary

Closes elastic#203792

This PR replaces the deprecated `access` tags with the new `security`
configuration.

All instances of `options: {tags: ['access:<privilege>']}` are now
updated to `security: {authz: {requiredPrivileges: [<privilege>]}}`.

These are the access tags currently used in APM that have been migrated:
- `access:apm`
- `access:apm_write`
- `access:apm_settings_write`
- `access:ml:canGetJobs`
- `access:ml:canCreateJob`
- `access:ml:canCloseJob`
- `access:ai_assistant`

(cherry picked from commit a4cf54c)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@iblancof iblancof

Labels
Team:obs-ux-infra_services Observability Infrastructure & Services User Experience Team technical debt Improvement of the software architecture and operational architecture v9.0.0
Projects
None yet
Milestone
No milestone
Development

Successfully merging a pull request may close this issue.

[APM] Update deprecated access tags to the new security configuration in routes iblancof/kibana
3 participants
@crespocarlos @elasticmachine @iblancof