Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[ISM rollover] Create new role to grant ISM API permissions #2552

Closed
Tracked by #18999
AlexRuiz7 opened this issue Oct 24, 2023 · 2 comments · Fixed by #2553
Closed
Tracked by #18999

[ISM rollover] Create new role to grant ISM API permissions #2552

AlexRuiz7 opened this issue Oct 24, 2023 · 2 comments · Fixed by #2553
Assignees
Labels
level/subtask Task issue type/enhancement Enhancement issue

Comments

@AlexRuiz7
Copy link
Member

AlexRuiz7 commented Oct 24, 2023

Description

As part of wazuh/wazuh#18999, we need to create a new role in the indexer to grant ISM API permissions, so the app can upload the ISM policy for auto-rollover. This role can be used by the users and wazuh-cloud for their own needs.

The details about the role is described in the main issue.


action_groups.yml

---
manage_ism:
  reserved: true
  hidden: false
  allowed_actions:
  - "cluster:admin/opendistro/ism/*"
  static: false

roles.yml

---
manage_ism:
  reserved: true
  hidden: false
  cluster_permissions:
  - "manage_ism"
  static: false

roles_mapping.yml

---
manage_ism:
  reserved: true
  hidden: false
  users:
  - "kibanaserver"

Originally posted by @AlexRuiz7 in wazuh/wazuh#18999 (comment)

@AlexRuiz7 AlexRuiz7 added level/subtask Task issue type/enhancement Enhancement issue labels Oct 24, 2023
@AlexRuiz7 AlexRuiz7 self-assigned this Oct 24, 2023
@AlexRuiz7 AlexRuiz7 linked a pull request Oct 24, 2023 that will close this issue
7 tasks
@rauldpm
Copy link
Member

rauldpm commented Nov 6, 2023

Reviewed: #2553 (review)

Issue changed to On hold


Tests have been carried out, issue changed to In review

@AlexRuiz7
Copy link
Member Author

AlexRuiz7 commented Nov 9, 2023

Changes applied to wazuh-packages and wazuh-docker

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
level/subtask Task issue type/enhancement Enhancement issue
Projects
No open projects
Archived in project
Development

Successfully merging a pull request may close this issue.

2 participants