Skip to content

[Alerting V2] Update privileges for Alerting V2 indexes and views.#144313

Merged
adcoelho merged 7 commits into
elastic:mainfrom
adcoelho:alerting-v2-update-view-permissions
Mar 19, 2026
Merged

[Alerting V2] Update privileges for Alerting V2 indexes and views.#144313
adcoelho merged 7 commits into
elastic:mainfrom
adcoelho:alerting-v2-update-view-permissions

Conversation

@adcoelho
Copy link
Copy Markdown
Contributor

Summary

Unfortunately, the indexes and views for alerting V2 have been renamed.

This PR updates the patterns to match the new names. All Kibana code is still only on a feature branch.

@adcoelho adcoelho self-assigned this Mar 16, 2026
@adcoelho adcoelho requested review from a team as code owners March 16, 2026 11:48
@adcoelho adcoelho requested a review from jeramysoucy March 16, 2026 11:48
@elasticsearchmachine elasticsearchmachine added needs:triage Requires assignment of a team area label v9.4.0 labels Mar 16, 2026
/** Alerting V2 - alert events and action indexes used by multiple solutions */
public static final String ALERTING_V2_INDEX_ALIAS = ".alerting*";
public static final String ALERTING_V2_VIEWS = "$.alerting*";
public static final String ALERTING_V2_ALERT_INDEX_ALIAS = ".alert*";
Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Would it be better to merge this with 53 since ALERTING_V2_ALERT_INDEX_ALIAS is a superset?

I assumed it would be better to have different variables for clarity.

@adcoelho adcoelho added :Security/Authorization Roles, Privileges, DLS/FLS, RBAC/ABAC and removed needs:triage Requires assignment of a team area label labels Mar 16, 2026
@elasticsearchmachine elasticsearchmachine added the Team:Security Meta label for security team label Mar 16, 2026
@elasticsearchmachine
Copy link
Copy Markdown
Collaborator

Pinging @elastic/es-security (Team:Security)

RoleDescriptor.IndicesPrivileges.builder()
.indices(ReservedRolesStore.ALERTING_V2_RULE_INDEX_ALIAS)
.privileges("all")
.build(),
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Just leaving a breadcrumb here in regard to use of "all", since it usually something we try to avoid:

In this case, we're just updating the indices involved to accommodate a name change, so we're good 👍

Copy link
Copy Markdown
Contributor

@jfreden jfreden left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM!

@adcoelho adcoelho merged commit e6814db into elastic:main Mar 19, 2026
42 checks passed
michalborek pushed a commit to michalborek/elasticsearch that referenced this pull request Mar 23, 2026
…lastic#144313)

* Update privileges for Alerting V2 indexes and views.

* [CI] Auto commit changes from spotless

---------

Co-authored-by: elasticsearchmachine <infra-root+elasticsearchmachine@elastic.co>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

>non-issue :Security/Authorization Roles, Privileges, DLS/FLS, RBAC/ABAC Team:Security Meta label for security team v9.4.0

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants