Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

API to clean up not decryptable saved objects #97453

Open
lucabelluccini opened this issue Apr 19, 2021 · 1 comment
Open

API to clean up not decryptable saved objects #97453

lucabelluccini opened this issue Apr 19, 2021 · 1 comment
Labels
enhancement New value added to drive a business result Feature:Saved Objects Feature:Security/Encrypted Saved Objects Team:Security Team focused on: Auth, Users, Roles, Spaces, Audit Logging, and more!

Comments

@lucabelluccini
Copy link
Contributor

Describe the feature:

There are few cases where saved objects should be cleaned up from the Kibana indices.

Saved Objects which cannot be decrypted due to the fact the key has been lost or was not explicitly set (consequence of #81511).

The API should ask for confirmation as there is data loss.
I wouldn't do this automatically as a user might have the encryption key and is just adding the key to the rotation keys.

Describe a specific use case for the feature:

A user created encrypted saved objects on 7.11 with the auto-generated encryption key.
On 7.12, we stop generating it and the user might no more be able to read those objects.
There will be objects kept in Kibana indices which cannot be recovered anymore and those can affect saved object migrations or in any case increase the size of Kibana index.

@botelastic botelastic bot added the needs-team Issues missing a team label label Apr 19, 2021
@azasypkin azasypkin added enhancement New value added to drive a business result Team:Security Team focused on: Auth, Users, Roles, Spaces, Audit Logging, and more! labels Apr 19, 2021
@elasticmachine
Copy link
Contributor

Pinging @elastic/kibana-security (Team:Security)

@botelastic botelastic bot removed the needs-team Issues missing a team label label Apr 19, 2021
@exalate-issue-sync exalate-issue-sync bot added impact:low Addressing this issue will have a low level of impact on the quality/strength of our product. loe:small Small Level of Effort labels Sep 29, 2021
@legrego legrego removed EnableJiraSync loe:small Small Level of Effort impact:low Addressing this issue will have a low level of impact on the quality/strength of our product. labels Aug 18, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New value added to drive a business result Feature:Saved Objects Feature:Security/Encrypted Saved Objects Team:Security Team focused on: Auth, Users, Roles, Spaces, Audit Logging, and more!
Projects
None yet
Development

No branches or pull requests

5 participants