Skip to content

Commit a6d55ed

Browse files
authored
[ML] Give the kibana user read/write access to reindexed hidden ml indices (#121897) (#122038)
Indices are reindexed on upgrade. Adds an index pattern to the role descriptor matching the upgraded indices
1 parent ff9c2f0 commit a6d55ed

File tree

1 file changed

+5
-0
lines changed

1 file changed

+5
-0
lines changed

x-pack/plugin/core/src/main/java/org/elasticsearch/xpack/core/security/authz/store/KibanaOwnedReservedRoleDescriptors.java

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -119,6 +119,11 @@ static RoleDescriptor kibanaSystem(String name) {
119119
.indices(".ml-annotations*", ".ml-notifications*")
120120
.privileges("read", "write")
121121
.build(),
122+
// And the reindexed indices from v7
123+
RoleDescriptor.IndicesPrivileges.builder()
124+
.indices(".reindexed-v8-ml-annotations*", ".reindexed-v8-ml-notifications*")
125+
.privileges("read", "write")
126+
.build(),
122127

123128
// APM agent configuration - system index defined in KibanaPlugin
124129
RoleDescriptor.IndicesPrivileges.builder()

0 commit comments

Comments
 (0)