-
Notifications
You must be signed in to change notification settings - Fork 25.7k
[DOCS] Adds more authorization info for CCR APIs #35606
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Conversation
|
Pinging @elastic/es-distributed |
|
Pinging @elastic/es-security |
5f57261 to
f273830
Compare
martijnvg
left a comment
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
@lcawl Thanks! I left a few comments.
|
|
||
| ==== Authorization | ||
|
|
||
| If the {es} {security-features} are enabled, you must have `read` and `monitor` |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Cluster monitor privileges are needed to use this api in the follower cluster.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I'm assuming this is instead of read and monitor index privileges. If that's not correct, please let me know.
|
|
||
| ==== Authorization | ||
|
|
||
| If the {es} {security-features} are enabled, you must have `manage_follow_index` |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
only manage_follow_index is needed in the follower cluster.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Done, thanks!
|
|
||
| ==== Authorization | ||
|
|
||
| If the {es} {security-features} are enabled, you must have `read` and `monitor` |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Cluster monitor privileges are needed to use this api in the follower cluster.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Ditto, I'm not certain if it also needs cluster monitor privileges or only needs them.
|
|
||
| //==== Authorization | ||
|
|
||
| //TBD |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
This is the same as put and delete auto follow pattern APIs.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Done, thanks!
martijnvg
left a comment
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM
Related to #35557
This PR adds authorization details for the remainder of the cross-cluster replication APIs.