Skip to content

Commit e6103ba

Browse files
authored
Revert "[Fleet] add privileges to kibana_system to read integrations data (#132400)" (#132499)
This reverts commit 364c70e.
1 parent 2eebbb4 commit e6103ba

File tree

2 files changed

+1
-6
lines changed

2 files changed

+1
-6
lines changed

x-pack/plugin/core/src/main/java/org/elasticsearch/xpack/core/security/authz/store/KibanaOwnedReservedRoleDescriptors.java

Lines changed: 0 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -328,8 +328,6 @@ static RoleDescriptor kibanaSystem(String name) {
328328
"indices:admin/data_stream/lifecycle/put"
329329
)
330330
.build(),
331-
// Read datasets for auto install content packages feature in Fleet
332-
RoleDescriptor.IndicesPrivileges.builder().indices("logs-*", "metrics-*", "traces-*").privileges("read").build(),
333331
// Endpoint specific action responses. Kibana reads and writes (for third party
334332
// agents) to the index to display action responses to the user.
335333
// `create_index`: is necessary in order to ensure that the DOT datastream index is

x-pack/plugin/core/src/test/java/org/elasticsearch/xpack/core/security/authz/store/ReservedRolesStoreTests.java

Lines changed: 1 addition & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -1397,10 +1397,7 @@ public void testKibanaSystemRole() {
13971397
|| indexName.startsWith(".logs-endpoint.actions-")
13981398
|| indexName.startsWith(".logs-endpoint.action.responses-")
13991399
|| indexName.startsWith(".logs-endpoint.heartbeat-")
1400-
|| indexName.startsWith(".logs-osquery_manager.actions-")
1401-
|| indexName.startsWith("logs-")
1402-
|| indexName.startsWith("metrics-")
1403-
|| indexName.startsWith("traces-");
1400+
|| indexName.startsWith(".logs-osquery_manager.actions-");
14041401
assertThat(
14051402
kibanaRole.indices().allowedIndicesMatcher(TransportGetAction.TYPE.name()).test(indexAbstraction),
14061403
is(isAlsoReadIndex)

0 commit comments

Comments
 (0)