Enable restriction of internal APIs for serverless

elastic · Jul 12, 2023 · b884382 · b884382
1 parent 9a7cc5a
commit b884382
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 1 deletion.
diff --git a/config/serverless.yml b/config/serverless.yml
@@ -48,7 +48,7 @@ data.search.sessions.enabled: false
 advanced_settings.enabled: false
 
 # Enforce restring access to internal APIs see https://github.com/elastic/kibana/issues/151940
-# server.restrictInternalApis: true
+server.restrictInternalApis: true
 # Telemetry enabled by default and not disableable via UI
 telemetry.optIn: true
 telemetry.allowChangingOptInStatus: false

diff --git a/x-pack/test_serverless/api_integration/services/svl_common_api.ts b/x-pack/test_serverless/api_integration/services/svl_common_api.ts
@@ -11,6 +11,7 @@ import { FtrProviderContext } from '../ftr_provider_context';
 
 const COMMON_REQUEST_HEADERS = {
   'kbn-xsrf': 'some-xsrf-token',
+  'x-elastic-internal-origin': 'some-value',
 };
 
 export function SvlCommonApiServiceProvider({}: FtrProviderContext) {