Skip to content

Commit 8d4f034

Browse files
authored
[ML] Give the kibana user read/write access to reindexed hidden ml indices (#121897)
Indices are reindexed on upgrade. Adds an index pattern to the role descriptor matching the upgraded indices
1 parent 9f35608 commit 8d4f034

File tree

1 file changed

+5
-0
lines changed

1 file changed

+5
-0
lines changed

x-pack/plugin/core/src/main/java/org/elasticsearch/xpack/core/security/authz/store/KibanaOwnedReservedRoleDescriptors.java

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -120,6 +120,11 @@ static RoleDescriptor kibanaSystem(String name) {
120120
.indices(".ml-annotations*", ".ml-notifications*")
121121
.privileges("read", "write")
122122
.build(),
123+
// And the reindexed indices from v7
124+
RoleDescriptor.IndicesPrivileges.builder()
125+
.indices(".reindexed-v8-ml-annotations*", ".reindexed-v8-ml-notifications*")
126+
.privileges("read", "write")
127+
.build(),
123128

124129
// APM agent configuration - system index defined in KibanaPlugin
125130
RoleDescriptor.IndicesPrivileges.builder()

0 commit comments

Comments
 (0)