diff --git a/test/packages/other/with_legacy_policy_api/data_stream/indicator/_dev/test/policy/test-default.expected b/test/packages/other/with_legacy_policy_api/data_stream/indicator/_dev/test/policy/test-default.expected new file mode 100644 index 0000000000..4b2cb58326 --- /dev/null +++ b/test/packages/other/with_legacy_policy_api/data_stream/indicator/_dev/test/policy/test-default.expected @@ -0,0 +1,37 @@ +inputs: + - data_stream: + namespace: ep + meta: + package: + name: with_legacy_policy_api + name: test-default-with_legacy_policy_api + streams: + - data_stream: + dataset: with_legacy_policy_api.indicator + exclude_files: + - .gz$ + paths: + - /var/log/prod-*.log + processors: + - add_locale: null + - add_tags: + tags: + - revoked_true + - env_production + type: logfile + use_output: default +output_permissions: + default: + _elastic_agent_checks: + cluster: + - monitor + _elastic_agent_monitoring: + indices: [] + uuid-for-permissions-on-related-indices: + indices: + - names: + - logs-with_legacy_policy_api.indicator-ep + privileges: + - auto_configure + - create_doc +secret_references: [] diff --git a/test/packages/other/with_legacy_policy_api/data_stream/indicator/_dev/test/policy/test-default.yml b/test/packages/other/with_legacy_policy_api/data_stream/indicator/_dev/test/policy/test-default.yml new file mode 100644 index 0000000000..ccdf3b779e --- /dev/null +++ b/test/packages/other/with_legacy_policy_api/data_stream/indicator/_dev/test/policy/test-default.yml @@ -0,0 +1,9 @@ +# policy_api_format: legacy is required because this package has a select variable +# (revoked) with "false" as an option value. Fleet's simplified API coerces the +# string "false" to boolean false before validation, causing a 400 error. +policy_api_format: legacy +data_stream: + vars: + revoked: "true" + paths: + - /var/log/prod-*.log diff --git a/test/packages/other/with_legacy_policy_api/data_stream/indicator/_dev/test/policy/test-staging.expected b/test/packages/other/with_legacy_policy_api/data_stream/indicator/_dev/test/policy/test-staging.expected new file mode 100644 index 0000000000..ed49d9e4c5 --- /dev/null +++ b/test/packages/other/with_legacy_policy_api/data_stream/indicator/_dev/test/policy/test-staging.expected @@ -0,0 +1,37 @@ +inputs: + - data_stream: + namespace: ep + meta: + package: + name: with_legacy_policy_api + name: test-staging-with_legacy_policy_api + streams: + - data_stream: + dataset: with_legacy_policy_api.indicator + exclude_files: + - .gz$ + paths: + - /var/log/stag-*.log + processors: + - add_locale: null + - add_tags: + tags: + - revoked_false + - env_staging + type: logfile + use_output: default +output_permissions: + default: + _elastic_agent_checks: + cluster: + - monitor + _elastic_agent_monitoring: + indices: [] + uuid-for-permissions-on-related-indices: + indices: + - names: + - logs-with_legacy_policy_api.indicator-ep + privileges: + - auto_configure + - create_doc +secret_references: [] diff --git a/test/packages/other/with_legacy_policy_api/data_stream/indicator/_dev/test/policy/test-staging.yml b/test/packages/other/with_legacy_policy_api/data_stream/indicator/_dev/test/policy/test-staging.yml new file mode 100644 index 0000000000..04dcc965d3 --- /dev/null +++ b/test/packages/other/with_legacy_policy_api/data_stream/indicator/_dev/test/policy/test-staging.yml @@ -0,0 +1,11 @@ +# policy_api_format: legacy is required because this package has a select variable +# (revoked) with "false" as an option value. Fleet's simplified API coerces the +# string "false" to boolean false before validation, causing a 400 error. +policy_api_format: legacy +vars: + revoked: "false" + environment: "staging" +data_stream: + vars: + paths: + - /var/log/stag-*.log