Skip to content

Conversation

@n1v0lg
Copy link
Contributor

@n1v0lg n1v0lg commented Mar 26, 2025

This PR grants manage_failure_store to the internal user _data_stream_lifecycle to enable life-cycle management for the failure indices of data stream, which includes rollovers using the failures selector.

I'm only unit testing this but we also need to add DLM tests for the failure store with security enabled.

Relates: ES-11355

@n1v0lg n1v0lg added the :Security/Authorization Roles, Privileges, DLS/FLS, RBAC/ABAC label Mar 26, 2025
@n1v0lg n1v0lg self-assigned this Mar 26, 2025
new RoleDescriptor(
UsernamesField.LAZY_ROLLOVER_ROLE,
new String[] {},
DataStream.isFailureStoreFeatureFlagEnabled()
Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Just refactoring, no actual changes for this user.

@n1v0lg n1v0lg added the auto-backport Automatically create backport pull requests when merged label Mar 26, 2025
@n1v0lg n1v0lg added the v8.19.0 label Mar 27, 2025
@n1v0lg n1v0lg marked this pull request as ready for review March 27, 2025 09:34
@n1v0lg n1v0lg requested a review from slobodanadamovic March 27, 2025 09:34
@elasticsearchmachine elasticsearchmachine added the Team:Security Meta label for security team label Mar 27, 2025
@elasticsearchmachine
Copy link
Collaborator

Pinging @elastic/es-security (Team:Security)

Copy link
Contributor

@slobodanadamovic slobodanadamovic left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@n1v0lg n1v0lg added the auto-merge-without-approval Automatically merge pull request when CI checks pass (NB doesn't wait for reviews!) label Mar 27, 2025
@elasticsearchmachine elasticsearchmachine merged commit fa46aab into elastic:main Mar 27, 2025
22 checks passed
@n1v0lg n1v0lg deleted the failure-store-internal-user-access branch March 27, 2025 14:17
@elasticsearchmachine
Copy link
Collaborator

💚 Backport successful

Status Branch Result
8.x

omricohenn pushed a commit to omricohenn/elasticsearch that referenced this pull request Mar 28, 2025
This PR grants `manage_failure_store` to the internal user
`_data_stream_lifecycle` to enable life-cycle management for the failure
indices of data stream, which includes rollovers using the failures
selector.

I'm only unit testing this but we also need to add DLM tests for the
failure store with security enabled. 

Relates: ES-11355
elasticsearchmachine pushed a commit that referenced this pull request Mar 31, 2025
This PR grants `manage_failure_store` to the internal user
`_data_stream_lifecycle` to enable life-cycle management for the failure
indices of data stream, which includes rollovers using the failures
selector.

I'm only unit testing this but we also need to add DLM tests for the
failure store with security enabled. 

Relates: ES-11355

Co-authored-by: Slobodan Adamović <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

auto-backport Automatically create backport pull requests when merged auto-merge-without-approval Automatically merge pull request when CI checks pass (NB doesn't wait for reviews!) >non-issue :Security/Authorization Roles, Privileges, DLS/FLS, RBAC/ABAC Team:Security Meta label for security team v8.19.0 v9.1.0

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants