In the following code, we give more permission to the API that we would like to, we should restrict the permissions to the data stream and not the backing indices and we should only use minimal permissions.
|
names: [ |
|
'logs-*', |
|
'metrics-*', |
|
'traces-*', |
|
'.ds-logs-*', |
|
'.ds-metrics-*', |
|
'.ds-traces-*', |
|
], |
|
privileges: ['write', 'create_index', 'indices:admin/auto_create'], |
|
allow_restricted_indices: false, |
{
"fleet-output": {
"cluster": ["monitor"],
"index": [{
"names": [
"logs-*",
"metrics-*",
"traces-*",
],
"privileges": [
"create_doc",
"indices:admin/auto_create"
]
}]
}
}
In the following code, we give more permission to the API that we would like to, we should restrict the permissions to the data stream and not the backing indices and we should only use minimal permissions.
kibana/x-pack/test/fleet_api_integration/apis/fleet_setup.ts
Lines 64 to 73 in 49d95f6