New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
[Fleet] Fix add Fleet server scenarios with subfeatures enabled #182015
[Fleet] Fix add Fleet server scenarios with subfeatures enabled #182015
Conversation
🤖 GitHub commentsExpand to view the GitHub comments
Just comment with:
|
7a460c6
to
105ac55
Compare
Pinging @elastic/fleet (Team:Fleet) |
@@ -159,7 +173,7 @@ export const registerRoutes = (router: FleetAuthzRouter) => { | |||
.post({ | |||
path: APP_API_ROUTES.GENERATE_SERVICE_TOKEN_PATTERN_DEPRECATED, | |||
fleetAuthz: { | |||
fleet: { all: true }, | |||
fleet: { allAgents: true }, |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Todo: add to e2e tests
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM
/ci |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Code LGTM
💚 Build Succeeded
Metrics [docs]Async chunks
Page load bundle
History
To update your PR or re-run it, just comment with: cc @nchaulet |
Summary
Resolve #180661
Resolve #181757
Fix a few bug to note show invalid action when user try to add a fleet server without all the needed permissions, sees UI changes for details.
UI Changes
Add Fleet server flyout
If the user do not have
manage_service_account
he could not generate service token and cannot enroll a fleet server.If a user cannot create policies it will not be able to click on generate fleet server policy
Integration policy table
Disable add agent if user cannot add Fleet server (no agents: all, settings: all(
Tests
Manual Try to add fleet server with and without
manage_service_account