Skip to content

[8.x] [EDR Workflows] The host isolation exception tab is hidden on the basic license if no artifacts (#192562)#193711

Merged
kibanamachine merged 1 commit intoelastic:8.xfrom
kibanamachine:backport/8.x/pr-192562
Sep 23, 2024
Merged

[8.x] [EDR Workflows] The host isolation exception tab is hidden on the basic license if no artifacts (#192562)#193711
kibanamachine merged 1 commit intoelastic:8.xfrom
kibanamachine:backport/8.x/pr-192562

Conversation

@kibanamachine
Copy link
Copy Markdown
Contributor

Backport

This will backport the following commits from main to 8.x:

Questions ?

Please refer to the Backport tool documentation

…ic license if no artifacts (elastic#192562)

This PR updates how the Host Isolation Exceptions tab is displayed based
on the user’s permissions and license. The tab is always visible to
platinum+ users. For lower-tier licenses, a check is performed: if a
user has previously defined host isolation exceptions, they will see the
tab and be able to view or remove existing exceptions. If they haven’t,
the tab will be hidden, and the functionality will be inaccessible.

Previously, even if a user didn’t have access to host isolation
exceptions, they could still see and enter the Host Isolation Exceptions
tab.

To test locally:
ESS:
1. Start ES + Kibana the regular way, with the default `trial` license.
2. Add HIE
3. Downgrade license (https://github.com/elastic/pzl-es-tools)
4. Verify that the license had been downgraded

Serverless:
1. Start Serverless ES `yarn es serverless --clean --teardown --kill -E
xpack.security.authc.api_key.enabled=true -E http.host=0.0.0.0
--projectType security`
2. Start Serverless Kibana `yarn serverless-security`
3. Add HIE
4. Modify `config/serverless.security.yml` to security and endpoint
essential
5. Wait for Kibana to reload

ESS:

https://github.com/user-attachments/assets/75527af7-9d06-4da7-9e86-6ce6b22ac147

Serverless:

https://github.com/user-attachments/assets/e89bd642-9e99-4a22-8b42-5997f7333ea6

---------

Co-authored-by: Ash <1849116+ashokaditya@users.noreply.github.com>
(cherry picked from commit 636baad)
@kibana-ci
Copy link
Copy Markdown

💛 Build succeeded, but was flaky

Failed CI Steps

Metrics [docs]

Module Count

Fewer modules leads to a faster build time

id before after diff
securitySolution 5813 5814 +1

Async chunks

Total size of all lazy-loaded chunks that will be downloaded as the user navigates the app

id before after diff
securitySolution 20.4MB 20.4MB +1.9KB
Unknown metric groups

References to deprecated APIs

id before after diff
securitySolution 470 458 -12

To update your PR or re-run it, just comment with:
@elasticmachine merge upstream

cc @szwarckonrad

@kibanamachine kibanamachine merged commit 7ceb68f into elastic:8.x Sep 23, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

backport This PR is a backport of another PR

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants