Skip to content

Conversation

@muskan-agarwal26
Copy link
Contributor

@muskan-agarwal26 muskan-agarwal26 commented Sep 17, 2025

PR Description:

This PR focuses on the short term solution which add the logs-cyera.classification-*, logs-cyera.issue-* and logs-cyera.datastore-* indices under the kibana_system role with deletion privileges to prevent a failed deletion error when the index enters the deletion phase for the ILM lifecycle, in upcoming PR. As it ships transform pipeline too hence read, write permissions are also required.

Current behavior:

It shows permission issue while deleting the index.

Closes - elastic/kibana#235998

@muskan-agarwal26 muskan-agarwal26 requested a review from a team as a code owner September 17, 2025 12:02
@cla-checker-service
Copy link

cla-checker-service bot commented Sep 17, 2025

💚 CLA has been signed

@elasticsearchmachine elasticsearchmachine added v9.2.0 needs:triage Requires assignment of a team area label external-contributor Pull request authored by a developer outside the Elasticsearch team labels Sep 17, 2025
@github-actions
Copy link
Contributor

ℹ️ Important: Docs version tagging

👋 Thanks for updating the docs! Just a friendly reminder that our docs are now cumulative. This means all 9.x versions are documented on the same page and published off of the main branch, instead of creating separate pages for each minor version.

We use applies_to tags to mark version-specific features and changes.

Expand for a quick overview

When to use applies_to tags:

✅ At the page level to indicate which products/deployments the content applies to (mandatory)
✅ When features change state (e.g. preview, ga) in a specific version
✅ When availability differs across deployments and environments

What NOT to do:

❌ Don't remove or replace information that applies to an older version
❌ Don't add new information that applies to a specific version without an applies_to tag
❌ Don't forget that applies_to tags can be used at the page, section, and inline level

🤔 Need help?

@ShourieG ShourieG added auto-backport Automatically create backport pull requests when merged >non-issue :Security/Authorization Roles, Privileges, DLS/FLS, RBAC/ABAC labels Sep 18, 2025
@elasticsearchmachine elasticsearchmachine added Team:Security Meta label for security team and removed needs:triage Requires assignment of a team area label labels Sep 18, 2025
@elasticsearchmachine
Copy link
Collaborator

Pinging @elastic/es-security (Team:Security)

@ShourieG
Copy link
Contributor

/test

@ShourieG
Copy link
Contributor

ShourieG commented Sep 18, 2025

@muskan-agarwal26 please sign all the CLA agreements

@ShourieG
Copy link
Contributor

@elastic/kibana-security, need approval on this so we can proceed with the integration flow on our end

Copy link
Contributor

@elena-shostak elena-shostak left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@muskan-agarwal26
Copy link
Contributor Author

@ShourieG , I have signed the CLA agreement.

@muskan-agarwal26 muskan-agarwal26 force-pushed the cyera-add_ilm_delete_index branch from d394d13 to 7b45175 Compare September 22, 2025 09:06
@ShourieG
Copy link
Contributor

/test

@ShourieG
Copy link
Contributor

@elasticsearchmachine test this please

@ShourieG
Copy link
Contributor

@elena-shostak, any reason why the ci-tests are stuck atm ?

@elena-shostak
Copy link
Contributor

/ci

@elena-shostak
Copy link
Contributor

/test

@ShourieG
Copy link
Contributor

@muskan-agarwal26, can you resolve the merge conflicts and update the branch. It should resolve the ci issues.

@muskan-agarwal26
Copy link
Contributor Author

@ShourieG , resolved the merged conflicts!

@ShourieG
Copy link
Contributor

@elasticsearchmachine test this please

@ShourieG
Copy link
Contributor

@elasticsearchmachine test this please

@muskan-agarwal26
Copy link
Contributor Author

💚 All backports created successfully

Status Branch Result
9.1
9.0
8.19

Questions ?

Please refer to the Backport tool documentation

muskan-agarwal26 added a commit to muskan-agarwal26/elasticsearch that referenced this pull request Nov 3, 2025
This PR focuses on the short term solution which add the logs-cyera.classification-*, logs-cyera.issue-* and logs-cyera.datastore-* indices under the kibana_system role with deletion privileges to prevent a failed deletion error when the index enters the deletion phase for the ILM lifecycle, in upcoming PR. As it ships transform pipeline too hence read, write permissions are also required.

---------

Co-authored-by: muskan-crest <[email protected]>
Co-authored-by: elasticsearchmachine <[email protected]>
Co-authored-by: Elena Shostak <[email protected]>
Co-authored-by: Shourie Ganguly <[email protected]>
(cherry picked from commit e31eb4b)
muskan-agarwal26 added a commit to muskan-agarwal26/elasticsearch that referenced this pull request Nov 3, 2025
This PR focuses on the short term solution which add the logs-cyera.classification-*, logs-cyera.issue-* and logs-cyera.datastore-* indices under the kibana_system role with deletion privileges to prevent a failed deletion error when the index enters the deletion phase for the ILM lifecycle, in upcoming PR. As it ships transform pipeline too hence read, write permissions are also required.

---------

Co-authored-by: muskan-crest <[email protected]>
Co-authored-by: elasticsearchmachine <[email protected]>
Co-authored-by: Elena Shostak <[email protected]>
Co-authored-by: Shourie Ganguly <[email protected]>
(cherry picked from commit e31eb4b)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

auto-backport Automatically create backport pull requests when merged external-contributor Pull request authored by a developer outside the Elasticsearch team >non-issue :Security/Authorization Roles, Privileges, DLS/FLS, RBAC/ABAC Team:Cloud Security Meta label for Cloud Security team Team:Security Meta label for security team v8.18.8 v8.19.5 v9.0.8 v9.1.5 v9.2.0

Projects

None yet

Development

Successfully merging this pull request may close these issues.

5 participants