Kibana: Cross Cluster Replication Docs missing Kibana permissions

Created on 26 Jun 2020  路  6Comments  路  Source: elastic/kibana

If an user were to set up CCR he needs specific privileges - manage, manage_ccr assigned to his role. Currently that is missing in the docs. I can see how someone would only add manage_ccr and get frustrated that it isn鈥檛 working. And the error message makes it even worse.( ref bug filed: https://github.com/elastic/kibana/issues/70000 )

I took a look at the code and we are checking for manage and manage_ccr.
Related code: https://github.com/elastic/kibana/blob/master/x-pack/plugins/cross_cluster_replication/server/routes/api/cross_cluster_replication/register_permissions_route.ts#L41

Ref Kibana doc: https://www.elastic.co/guide/en/kibana/current/managing-cross-cluster-replication.html
Ref ES doc: https://www.elastic.co/guide/en/elasticsearch/reference/current/ccr-getting-started.html

Its also a chain reaction I think..Remote clusters also is dependent on CCR - and it does not have the required privs defined in Kibana. https://www.elastic.co/guide/en/kibana/current/working-remote-clusters.html

cc @debadair @gchaps @LeeDr @cuff-links

Docs docs needs_docs

Most helpful comment

Its also a chain reaction I think..Remote clusters also is dependent on CCR - and it does not have the required privs defined in Kibana. https://www.elastic.co/guide/en/kibana/current/working-remote-clusters.html

@rashmivkulkarni
While CCR does rely on Remote Clusters, Remote Clusters does not rely on CCR. Cross Cluster Replication makes it so you can replicate data from Remote Clusters to a local cluster. Remote Clusters does not have any reference to features within CCR.

All 6 comments

Pinging @elastic/kibana-docs (Team:Docs)

Also, add the CCR acronym to the Kibana CCR doc:

(https://www.elastic.co/guide/en/kibana/current/managing-cross-cluster-replication.html

Currently, if users search for "kibana ccr", they get results for a page about ccr and index patterns instead the one above.

Its also a chain reaction I think..Remote clusters also is dependent on CCR - and it does not have the required privs defined in Kibana. https://www.elastic.co/guide/en/kibana/current/working-remote-clusters.html

@rashmivkulkarni
While CCR does rely on Remote Clusters, Remote Clusters does not rely on CCR. Cross Cluster Replication makes it so you can replicate data from Remote Clusters to a local cluster. Remote Clusters does not have any reference to features within CCR.

I created https://github.com/elastic/kibana/issues/76690 to clarify the required permissions and to track the changes we need to make in the code and in our docs.

@rashmivkulkarni, we recently updated the CCR tutorial, which includes a link to configuring CCR user privileges as part of the prerequisites.

Given those changes, I think that we can close this ticket, unless you feel strongly otherwise.

Thanks so much for all the effort for improvising the docs and providing the doc links. Closing this ticket.

Was this page helpful?
0 / 5 - 0 ratings