Commit graph

18 commits

Author SHA1 Message Date
István Zoltán Szabó
144e00104a
[8.x][DOCS] Fixes typo on built-in role page. (#126211) (#126217) 2025-04-04 00:53:21 +11:00
Jake Landis
84f4f3ac2b
Docs for monitor_stats privilege (#116533) (#116671)
This commit adds docs for monitor_stats and updates an example snippet to include both remote_indices and remote_cluster.

(cherry picked from commit b7167b73e3)
2024-11-13 02:45:38 +11:00
Liam Thompson
d71654195c
[DOCS] Wrap document/field restriction tip in IMPORTANT block (#112146) 2024-08-23 18:23:57 +02:00
Mary Gouseti
34a78f3cf3
Add documentation to deprecate the global retention privileges. (#112020) 2024-08-23 11:49:15 +03:00
Mary Gouseti
9185056efe
Clean up global retention from the cluster state and obsolete transport actions (#111636)
In this PR we remove unused code including relating to the global data retention with APIs implementation:

- The transport action for updating, deleting and retrieving the global retention.
- The `DataStreamGlobalRetention` from the cluster state (this should be bwc safe because we never exposed the APIs to add a data stream lifecycle to the cluster state).
- Make unused privileges monitor and managing global retention a noop.
- Remove cluster state update tasks.

The kept `DataStreamGlobalRetentionResolver` considering it could hold and provide the global retention from the settings when we implement it. We just renamed it to DataStreamGlobalRetentionProvider for now to better match what it does.

The factory retention settings should still work after this change.
2024-08-08 09:52:35 +03:00
Joe Gallo
27e7601698
Directly download commercial ip geolocation databases from providers (#110844)
Co-authored-by: Keith Massey <keith.massey@elastic.co>
2024-07-17 20:55:14 -04:00
Parker Timmins
eeedb356fd
Deprecate using slm privileges to access ilm (#110540)
Currently, read_slm privilege grants access to get the ILM status,
and manage_slm grants access to start/stop ILM. This access will
be removed in the future, but needs to be deprecated before
removal. Add deprecation warning to the read_slm and manage_slm docs.
2024-07-05 15:36:32 -05:00
Albert Zaharovits
747fa59a2c
DOCS Query Roles (#110473)
These are the docs changes in relation to
https://github.com/elastic/elasticsearch/pull/108733
2024-07-05 19:46:48 +10:00
Lisa Cawley
748dbd51e4
[DOCS] Add serverless details in Elasticsearch security privileges (#109718) 2024-07-03 09:52:21 -07:00
Jake Landis
7504fed0b3
remote_cluster role documentation and expose to built in privs API (#108840)
This commit introduces the documentation for remote_clusters which is used to help
 express the monitor_enrich privilege needed to use the ENRICH keyword across clusters 
when using the API key based CCS security model.

This commit also adds "remote_clusters" to the built in privs API to for easier consumption
 in Kibana.
2024-05-28 13:51:21 -05:00
Jake Landis
ff92296217
[docs] Prevent DLS/FLS if replication is assigned (#108839)
This commit adds documentation for the DLS/FLS restriction for RCS 2.0 API keys 
where both access and replication are defined and access has DSL/FLS.
This commit also fixes a few misleading variable names.
related: #108600
2024-05-22 12:05:34 -05:00
Slobodan Adamović
05d728e3ef
[DOCS] Document manage_inference and monitor_inference cluster privileges (#108553) 2024-05-13 16:34:46 +02:00
florent-leborgne
0c500e5264
Remove Beta label for RCS2.0 from 8.14 (#108030) 2024-05-02 15:43:21 +02:00
shainaraskas
164fcf091b
unhide setting (#107019) 2024-04-25 08:26:40 -04:00
Mary Gouseti
2122da31cd
[DSL] Introduce data stream global retention - Part 3 (#105682)
In this PR we introduce the API that will expose the global retention configuration and will allow users to take advantage of it.

These APIs are protected by the dedicated introduced privileges:

`manage_data_stream_global_retention` or higher, which allows all operations on the global retention configuration
`monitor_data_stream_retention` or higher, which allows the retrieval of the global retention configuration.

This PR is the final PR that makes the global retention available for our users.
2024-03-28 10:40:33 +02:00
David Kyle
2087b65523
[ML] Create inference_user and inference_admin roles (#106371)
Defines new inference_user and inference_admin roles with the 
related cluster privileges manage_inference and monitor_inference.
inference_user can list the models and preform inference, 
inference_admin can do the same plus create and delete models
2024-03-20 11:15:21 +00:00
Jake Landis
1eaa907052
Fix manage/monitor_enrich documentation (#100781)
manage_enrich is a cluster privilege, not a built in role. 
manage_enrich is already documented as a cluster privilege.
This commit remove manage_enrich from the role documentation.
This commit also makes mention of the monitor_enrich introduced in #99646.

related: #85877
2023-10-13 11:29:48 -05:00
James Rodewig
255c9a7f95
[DOCS] Move x-pack docs to docs/reference dir (#99209)
**Problem:**
For historical reasons, source files for the Elasticsearch Guide's security, watcher, and Logstash API docs are housed in the `x-pack/docs` directory. This can confuse new contributors who expect Elasticsearch Guide docs to be located in `docs/reference`. 

**Solution:**
- Move the security, watcher, and Logstash API doc source files to the `docs/reference` directory
- Update doc snippet tests to use security

Rel: https://github.com/elastic/platform-docs-team/issues/208
2023-09-12 14:53:41 -04:00