Skip to content

[8.4] [DOCS] Domain splitting impacts API keys (#88677) #88892

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 1 commit into from
Jul 28, 2022

Conversation

n1v0lg
Copy link
Contributor

@n1v0lg n1v0lg commented Jul 28, 2022

Backports the following commits to 8.4:

This PR documents the impact of domain splitting on API keys. API key
ownership is determined via username and user realm information,
including the user's security domain. API key ownership is shared
across users with the same username that are part of the same security
domain. A user loses ownership over an API key if their realm is
removed from the security domain that previously enabled ownership
through cross-realm resource sharing.
@n1v0lg n1v0lg added :Security/Authentication Logging in, Usernames/passwords, Realms (Native/LDAP/AD/SAML/PKI/etc) >docs General docs changes backport Team:Docs Meta label for docs team Team:Security Meta label for security team labels Jul 28, 2022
@n1v0lg
Copy link
Contributor Author

n1v0lg commented Jul 28, 2022

@elasticmachine run elasticsearch-ci/part-2

@n1v0lg
Copy link
Contributor Author

n1v0lg commented Jul 28, 2022

Backporting to 8.4 since this is only a doc change, and complements the implementation for updatable API keys shipped in 8.4.

@n1v0lg n1v0lg added v8.4.0 and removed v8.4.1 labels Jul 28, 2022
@n1v0lg n1v0lg merged commit a353686 into elastic:8.4 Jul 28, 2022
@n1v0lg n1v0lg deleted the backport/8.4/pr-88677 branch July 28, 2022 12:24
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
backport >docs General docs changes :Security/Authentication Logging in, Usernames/passwords, Realms (Native/LDAP/AD/SAML/PKI/etc) Team:Docs Meta label for docs team Team:Security Meta label for security team v8.4.0
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants