Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Service Accounts - auditing tests for existing fields #71668

Merged
merged 3 commits into from
Apr 14, 2021

Conversation

ywangd
Copy link
Member

@ywangd ywangd commented Apr 14, 2021

This PR ensure existing auditing tests cover service account authentication. It makes sure compatible existing fields also work for service accounts.

@ywangd ywangd added >test Issues or PRs that are addressing/adding tests :Security/Audit X-Pack Audit logging v8.0.0 v7.13.0 labels Apr 14, 2021
@ywangd ywangd requested a review from tvernum April 14, 2021 05:47
@elasticmachine elasticmachine added the Team:Security Meta label for security team label Apr 14, 2021
@elasticmachine
Copy link
Collaborator

Pinging @elastic/es-security (Team:Security)

@ywangd
Copy link
Member Author

ywangd commented Apr 14, 2021

@tvernum We have a task says "auditing for creating API based token". But I don't think it needs any specialised tests. The existing tests in LoggingAuditTrailTests are generic and should cover any old or new actions.

@tvernum
Copy link
Contributor

tvernum commented Apr 14, 2021

We have a task says "auditing for creating API based token". But I don't think it needs any specialised tests

I think we're good because the name of the token is included in the request so the audit should be fine. It's probably worth looking at the audit log and making sure there's no surprises, but I'm happy not to have specific tests.

Copy link
Contributor

@tvernum tvernum left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@ywangd
Copy link
Member Author

ywangd commented Apr 14, 2021

@elasticmachine update branch

@ywangd
Copy link
Member Author

ywangd commented Apr 14, 2021

@elasticmachine update branch

@ywangd ywangd merged commit 7a50ccd into elastic:master Apr 14, 2021
mark-vieira pushed a commit that referenced this pull request Apr 15, 2021
This PR ensure existing auditing tests cover service account authentication. 
It makes sure compatible existing fields also work for service accounts.
ywangd added a commit to ywangd/elasticsearch that referenced this pull request Apr 18, 2021
This PR ensure existing auditing tests cover service account authentication. 
It makes sure compatible existing fields also work for service accounts.
ywangd added a commit that referenced this pull request Apr 19, 2021
This PR ensure existing auditing tests cover service account authentication. 
It makes sure compatible existing fields also work for service accounts.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
:Security/Audit X-Pack Audit logging Team:Security Meta label for security team >test Issues or PRs that are addressing/adding tests v7.13.0 v8.0.0-alpha1
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants