[MD]Credential management in stack management

[seraphjiang]

be able to CRUD credential to support multiple datasource

Temporal tasks break down table with rough estimation. Will update the dates afterwards with more contexts.

• [MD][PoC] based on simple encryption and decryption strategies #1804
• [MD][RFC] OSD Credential Management #1839
  • [MD]Define the type of credential supported and define the setup workflow #1742
  • [MD] Data model and CRUD API interface #1810
• Credential Saved Object on Data Source Plugin
  • [MD] Implement Encrypt / Decrypt module #2081
    • [MD] Generate crypto materials via yarn start #1813
    • [MD]Verify wrapping key distribution #1828
    • [MD] Persist crypto materials #1938
  • [MD]Refactor server side router with SavedObjectsClientWrapperFactory #1850
  • [MD] Add fetch_and_decrypt() #1926
  • [MD] Optimize saved object mapping with product and UX inputs #2023
  • [MD] Provide update API to drop the document fields #2124
  • [MD] Refactor crypto module as a service #2207
• Credential Management pages on CM Plugin
  • Create UX mock pages
  • Add Save credential frontend page
  • Add Credential editing frontend page
  • Add Credential management frontend page
  • [MD] Productionize CM pages #1977
    • [MD] Extract credential form for reusablility #2144
    • [MD] Optimize navigation UX #1902
    • [MD] CM pages localization #2047
    • [Bug] Header component error on index pattern management page #2048
    • [MD] Add toast for create and update page #2049
    • [MD] Add rendering spanner #2050
    • [MD] Add header for editing page #2051
    • [MD] Optimize delete button on listing page #2055
    • [MD] Fix breadcrumb #2060
    • [MD] Add error modal on editing wizard and return back to list page #2184
  • [MD] Save and Edit page input validation #1973
  • [MD] Prevent user to delete credential has been used in any datasource - P1 #1876
  • [MD] Add href for credential saved object on saved object management table #1968
  • [MD] Support conditional rendering with global config #1978
  • [MD] Not expose credential materials for read flow #2025
  • [MD] Optimize text content and layout with UX inputs #2024
  • [MD] Delete Credential from editing page #2027
• [MD]Support global configuration on osd.yml #1904
• MISC
  • [MD] Remove runtime generated ts.map file
  • [MD] Apply dataSource plugin as dependent for cm and dsm plugins #2150
  • [MD] Add doc for feature flag #2158
• Security Review
  • Threat modeling
  • Pen test preparation
• Unit test
  • Add unit test for crypto module
  • [MD] Add security focused test cases for encrypt/decrypt #2068
  • [MD] Add unit test for brower plugin #2033
  • Fix stream_type.test.ts on CI env #2169
• Integration test
  • [MD] Add integration test for credential CRUD #2206
  • Add integration test for decryption

Documentation Tasks

• [MD] Add README for data_source plugin #2199

Optional Tasks

1. [MD] Add credential cache without crypto materials (optional) #1976
2. [MD]Best practice for credential import (Optional) #1872
3. [MD] Support fine grained access control (Optional) #1945
4. [MD] Support Keyring rotation and update encrypted field of all credentials (Optional)
5. [MD] Saved object migration for compatibiliy (Optional) #2046
6. [MD][Meta] Support SigV4 auth types for data source #2110
7. [MD] Add API level intercepter #2035
8. [MD] Support multiple Keyrings

[zhongnansu]

closing. Since all required tasks are marked as done