Unauthorized route migration for routes owned by kibana-presentation

[kibanamachine]

Authz API migration for unauthorized routes

This PR migrates unauthorized routes owned by your team to a new security configuration.
Please refer to the documentation for more information: Authorization API

Before migration:

router.get({
  path: '/api/path',
  ...
}, handler);

After migration:

router.get({
  path: '/api/path',
  security: {
    authz: {
      enabled: false,
      reason: 'This route is opted out from authorization because ...',
    },
  },
  ...
}, handler);

What to do next?

1. Review the changes in this PR.
2. Elaborate on the reasoning to opt-out of authorization.
3. Routes without a compelling reason to opt-out of authorization should plan to introduce them as soon as possible.
4. You might need to update your tests to reflect the new security configuration:

• If you have snapshot tests that include the route definition.

Any questions?

If you have any questions or need help with API authorization, please reach out to the @elastic/kibana-security team.

[elasticmachine]

Pinging @elastic/kibana-presentation (Team:Presentation)

[ThomThomson]

opt-out reasons LGTM! The only one I am slightly concerned about is the options list cluster settings route, but the only piece of config it returns is the allowExpensiveQueries setting, which is quite unimportant. Additionally, this is tracked in #200779

[elasticmachine]

💚 Build Succeeded

• Buildkite Build
• Commit: 1b0ce29

Metrics [docs]

✅ unchanged

History

• 💛 Build #261607 was flaky 3429daf
• 💚 Build #261468 succeeded ad3a1b2
• 💔 Build #261420 failed 8248775
• 💔 Build #261149 failed dde60a2
• 💚 Build #247020 succeeded dab911f

[kibanamachine]

Starting backport for target branches: 8.x

https://github.com/elastic/kibana/actions/runs/12420224216

[kibanamachine]

💚 All backports created successfully

Status	Branch	Result
✅	8.x

Note: Successful backport PRs will be merged automatically after passing CI.

Questions ?

Please refer to the Backport tool documentation