diff --git a/packages/cloud_defend/changelog.yml b/packages/cloud_defend/changelog.yml
index a9fc0f380fd..df5b1e665a9 100644
--- a/packages/cloud_defend/changelog.yml
+++ b/packages/cloud_defend/changelog.yml
@@ -1,4 +1,9 @@
 # newer versions go on top
+- version: "1.2.1-preview2"
+  changes:
+    - description: Updates manifest format version to 3.0.0. lifecycle.yml files added.
+      type: enhancement
+      link: https://github.com/elastic/integrations/pull/7805
 - version: "1.2.1-preview"
   changes:
     - description: Adds metrics-cloud_defend.heartbeat index
diff --git a/packages/cloud_defend/data_stream/alerts/lifecycle.yml b/packages/cloud_defend/data_stream/alerts/lifecycle.yml
new file mode 100644
index 00000000000..b56a81e81d7
--- /dev/null
+++ b/packages/cloud_defend/data_stream/alerts/lifecycle.yml
@@ -0,0 +1 @@
+data_retention: "30d"
diff --git a/packages/cloud_defend/data_stream/file/lifecycle.yml b/packages/cloud_defend/data_stream/file/lifecycle.yml
new file mode 100644
index 00000000000..b56a81e81d7
--- /dev/null
+++ b/packages/cloud_defend/data_stream/file/lifecycle.yml
@@ -0,0 +1 @@
+data_retention: "30d"
diff --git a/packages/cloud_defend/data_stream/heartbeat/lifecycle.yml b/packages/cloud_defend/data_stream/heartbeat/lifecycle.yml
new file mode 100644
index 00000000000..b56a81e81d7
--- /dev/null
+++ b/packages/cloud_defend/data_stream/heartbeat/lifecycle.yml
@@ -0,0 +1 @@
+data_retention: "30d"
diff --git a/packages/cloud_defend/data_stream/metrics/lifecycle.yml b/packages/cloud_defend/data_stream/metrics/lifecycle.yml
new file mode 100644
index 00000000000..b56a81e81d7
--- /dev/null
+++ b/packages/cloud_defend/data_stream/metrics/lifecycle.yml
@@ -0,0 +1 @@
+data_retention: "30d"
diff --git a/packages/cloud_defend/data_stream/process/lifecycle.yml b/packages/cloud_defend/data_stream/process/lifecycle.yml
new file mode 100644
index 00000000000..b56a81e81d7
--- /dev/null
+++ b/packages/cloud_defend/data_stream/process/lifecycle.yml
@@ -0,0 +1 @@
+data_retention: "30d"
diff --git a/packages/cloud_defend/manifest.yml b/packages/cloud_defend/manifest.yml
index ddf775e001e..77641a5b32b 100644
--- a/packages/cloud_defend/manifest.yml
+++ b/packages/cloud_defend/manifest.yml
@@ -1,7 +1,7 @@
-format_version: 2.3.0
+format_version: 3.0.0
 name: cloud_defend
 title: "Defend for Containers"
-version: 1.2.1-preview
+version: 1.2.1-preview2
 source:
   license: "Elastic-2.0"
 description: "Elastic Defend for Containers (BETA) provides cloud-native runtime protections for containerized environments."
@@ -11,7 +11,8 @@ categories:
   - kubernetes
   - security
 conditions:
-  kibana.version: "^8.8.0"
+  kibana:
+    version: ^8.11.0
 screenshots:
   - src: /img/control-policy-general-view-screenshot.png
     title: Control policy general view screenshot
@@ -57,4 +58,5 @@ policy_templates:
                   - match: [executableChanges]
                     actions: [alert]
 owner:
+  type: elastic
   github: elastic/sec-cloudnative-integrations