[Obs AI Assistant] Add security configs to API

elastic · Nov 22, 2024 · 0b4f2bb · 0b4f2bb
1 parent ad61b9d
commit 0b4f2bb
Show file tree

Hide file tree

Showing 3 changed files with 8 additions and 7 deletions.
diff --git a/packages/kbn-eslint-plugin-eslint/rules/no_deprecated_authz_config.js b/packages/kbn-eslint-plugin-eslint/rules/no_deprecated_authz_config.js
@@ -309,10 +309,11 @@ module.exports = {
         }
 
         if (
-          callee.type === 'MemberExpression' &&
-          callee.object &&
-          callee.object.name === 'router' &&
-          routeMethods.includes(callee.property.name)
+          (callee.type === 'MemberExpression' &&
+            callee.object &&
+            callee.object.name === 'router' &&
+            routeMethods.includes(callee.property.name)) ||
+          (callee.type === 'Identifier' && callee.name === 'createObservabilityServerRoute')
         ) {
           if (process.env.MIGRATE_ENABLED_AUTHZ === 'false') {
             maybeReportDisabledSecurityConfig(node, context, false);

diff --git a/x-pack/plugins/observability_solution/observability/server/plugin.ts b/x-pack/plugins/observability_solution/observability/server/plugin.ts
@@ -146,7 +146,7 @@ export class ObservabilityPlugin implements Plugin<ObservabilityPluginSetup> {
           all: {
             app: [observabilityFeatureId],
             catalogue: [observabilityFeatureId],
-            api: ['rac'],
+            api: ['rac', 'observability'],
             savedObject: {
               all: [],
               read: [],
@@ -164,7 +164,7 @@ export class ObservabilityPlugin implements Plugin<ObservabilityPluginSetup> {
           read: {
             app: [observabilityFeatureId],
             catalogue: [observabilityFeatureId],
-            api: ['rac'],
+            api: ['rac', 'observability'],
             savedObject: {
               all: [],
               read: [],

diff --git a/x-pack/plugins/observability_solution/observability/server/routes/assistant/route.ts b/x-pack/plugins/observability_solution/observability/server/routes/assistant/route.ts
@@ -12,7 +12,7 @@ import { createObservabilityServerRoute } from '../create_observability_server_r
 const getObservabilityAlertDetailsContextRoute = createObservabilityServerRoute({
   endpoint: 'GET /internal/observability/assistant/alert_details_contextual_insights',
   options: {
-    tags: [],
+    tags: ['access:observability'],
     access: 'internal',
   },
   params: t.type({