-
Notifications
You must be signed in to change notification settings - Fork 8.3k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
[ResponseOps][Actions] Manual migration of action routes without access tags #204030
Conversation
Pinging @elastic/response-ops (Team:ResponseOps) |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
The list_types
and list_types_system
do not perform any authorization. They do not use the actions client. Should we provide a different message for them?
💚 Build Succeeded
Metrics [docs]
History
cc @adcoelho |
Starting backport for target branches: 8.x https://github.com/elastic/kibana/actions/runs/12316971187 |
…ss tags (elastic#204030) Connected with elastic/kibana-team#1322 ## Summary Since most action routes do not use access tags they need to be migrated to include a reason in the security params. [Documentation.](https://docs.elastic.dev/kibana-dev-docs/key-concepts/security-api-authorization#opting-out-of-authorization-for-specific-routes) The following routes were migrated: - `createConnectorRoute` - `deleteConnectorRoute` - `getConnectorRoute` - `getAllConnectorsRoute` - `updateConnectorRoute` - `listTypesRoute` - `executeConnectorRoute` - `getGlobalExecutionLogRoute` - `getGlobalExecutionKPIRoute` - `getAllConnectorsIncludingSystemRoute` - `listTypesWithSystemRoute` - `getOAuthAccessToken` (cherry picked from commit 2dc790b)
💚 All backports created successfully
Note: Successful backport PRs will be merged automatically after passing CI. Questions ?Please refer to the Backport tool documentation |
…t access tags (#204030) (#204215) # Backport This will backport the following commits from `main` to `8.x`: - [[ResponseOps][Actions] Manual migration of action routes without access tags (#204030)](#204030) <!--- Backport version: 9.4.3 --> ### Questions ? Please refer to the [Backport tool documentation](https://github.com/sqren/backport) <!--BACKPORT [{"author":{"name":"Antonio","email":"[email protected]"},"sourceCommit":{"committedDate":"2024-12-13T13:57:13Z","message":"[ResponseOps][Actions] Manual migration of action routes without access tags (#204030)\n\nConnected with https://github.com/elastic/kibana-team/issues/1322\r\n\r\n## Summary\r\n\r\nSince most action routes do not use access tags they need to be migrated\r\nto include a reason in the security params.\r\n\r\n\r\n[Documentation.](https://docs.elastic.dev/kibana-dev-docs/key-concepts/security-api-authorization#opting-out-of-authorization-for-specific-routes)\r\n\r\nThe following routes were migrated:\r\n- `createConnectorRoute`\r\n- `deleteConnectorRoute`\r\n- `getConnectorRoute`\r\n- `getAllConnectorsRoute`\r\n- `updateConnectorRoute`\r\n- `listTypesRoute`\r\n- `executeConnectorRoute`\r\n- `getGlobalExecutionLogRoute`\r\n- `getGlobalExecutionKPIRoute`\r\n- `getAllConnectorsIncludingSystemRoute`\r\n- `listTypesWithSystemRoute`\r\n- `getOAuthAccessToken`","sha":"2dc790bbc024fd805aaafc9b2f6a5cc79dd2c6e2","branchLabelMapping":{"^v9.0.0$":"main","^v8.18.0$":"8.x","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["release_note:skip","Team:ResponseOps","v9.0.0","Feature:Alerting/RuleActions","backport:prev-minor","v8.18.0"],"title":"[ResponseOps][Actions] Manual migration of action routes without access tags ","number":204030,"url":"https://github.com/elastic/kibana/pull/204030","mergeCommit":{"message":"[ResponseOps][Actions] Manual migration of action routes without access tags (#204030)\n\nConnected with https://github.com/elastic/kibana-team/issues/1322\r\n\r\n## Summary\r\n\r\nSince most action routes do not use access tags they need to be migrated\r\nto include a reason in the security params.\r\n\r\n\r\n[Documentation.](https://docs.elastic.dev/kibana-dev-docs/key-concepts/security-api-authorization#opting-out-of-authorization-for-specific-routes)\r\n\r\nThe following routes were migrated:\r\n- `createConnectorRoute`\r\n- `deleteConnectorRoute`\r\n- `getConnectorRoute`\r\n- `getAllConnectorsRoute`\r\n- `updateConnectorRoute`\r\n- `listTypesRoute`\r\n- `executeConnectorRoute`\r\n- `getGlobalExecutionLogRoute`\r\n- `getGlobalExecutionKPIRoute`\r\n- `getAllConnectorsIncludingSystemRoute`\r\n- `listTypesWithSystemRoute`\r\n- `getOAuthAccessToken`","sha":"2dc790bbc024fd805aaafc9b2f6a5cc79dd2c6e2"}},"sourceBranch":"main","suggestedTargetBranches":["8.x"],"targetPullRequestStates":[{"branch":"main","label":"v9.0.0","branchLabelMappingKey":"^v9.0.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/204030","number":204030,"mergeCommit":{"message":"[ResponseOps][Actions] Manual migration of action routes without access tags (#204030)\n\nConnected with https://github.com/elastic/kibana-team/issues/1322\r\n\r\n## Summary\r\n\r\nSince most action routes do not use access tags they need to be migrated\r\nto include a reason in the security params.\r\n\r\n\r\n[Documentation.](https://docs.elastic.dev/kibana-dev-docs/key-concepts/security-api-authorization#opting-out-of-authorization-for-specific-routes)\r\n\r\nThe following routes were migrated:\r\n- `createConnectorRoute`\r\n- `deleteConnectorRoute`\r\n- `getConnectorRoute`\r\n- `getAllConnectorsRoute`\r\n- `updateConnectorRoute`\r\n- `listTypesRoute`\r\n- `executeConnectorRoute`\r\n- `getGlobalExecutionLogRoute`\r\n- `getGlobalExecutionKPIRoute`\r\n- `getAllConnectorsIncludingSystemRoute`\r\n- `listTypesWithSystemRoute`\r\n- `getOAuthAccessToken`","sha":"2dc790bbc024fd805aaafc9b2f6a5cc79dd2c6e2"}},{"branch":"8.x","label":"v8.18.0","branchLabelMappingKey":"^v8.18.0$","isSourceBranch":false,"state":"NOT_CREATED"}]}] BACKPORT--> Co-authored-by: Antonio <[email protected]>
Connected with https://github.com/elastic/kibana-team/issues/1322
Summary
Since most action routes do not use access tags they need to be migrated to include a reason in the security params.
Documentation.
The following routes were migrated:
createConnectorRoute
deleteConnectorRoute
getConnectorRoute
getAllConnectorsRoute
updateConnectorRoute
listTypesRoute
executeConnectorRoute
getGlobalExecutionLogRoute
getGlobalExecutionKPIRoute
getAllConnectorsIncludingSystemRoute
listTypesWithSystemRoute
getOAuthAccessToken