[Response Ops][Task Manager] Skip API Key Tasks If Security is Disabled

x-pack/platform/plugins/shared/task_manager/kibana.jsonc

@@ -14,6 +14,9 @@
       "xpack",
       "task_manager"
     ],
+    "requiredPlugins": [
+      "licensing"
+    ],
     "optionalPlugins": [
       "cloud",
       "usageCollection",

x-pack/platform/plugins/shared/task_manager/server/integration_tests/managed_configuration.test.ts

@@ -17,6 +17,7 @@ import { TaskManagerPlugin } from '../plugin';
 import { coreMock } from '@kbn/core/server/mocks';
 import type { TaskManagerConfig } from '../config';
 import { BulkUpdateError } from '../lib/bulk_update_error';
+import { licensingMock } from '@kbn/licensing-plugin/server/mocks';
 
 const mockTaskTypeRunFn = jest.fn();
 const mockCreateTaskRunner = jest.fn();
@@ -135,7 +136,9 @@ describe('managed configuration', () => {
         esStart.client.asInternalUser as unknown as Client
       );
       coreStart.savedObjects.createInternalRepository.mockReturnValue(savedObjectsClient);
-      taskManagerStart = await taskManager.start(coreStart, {});
+      taskManagerStart = await taskManager.start(coreStart, {
+        licensing: licensingMock.createStart(),
+      });
 
       // force rxjs timers to fire when they are scheduled for setTimeout(0) as the
       // sinon fake timers cause them to stall. We need to do this a few times for the
@@ -233,7 +236,9 @@ describe('managed configuration', () => {
         esStart.client.asInternalUser as unknown as Client
       );
       coreStart.savedObjects.createInternalRepository.mockReturnValue(savedObjectsClient);
-      taskManagerStart = taskManager.start(coreStart, {});
+      taskManagerStart = taskManager.start(coreStart, {
+        licensing: licensingMock.createStart(),
+      });
 
       // force rxjs timers to fire when they are scheduled for setTimeout(0) as the
       // sinon fake timers cause them to stall. We need to do this a few times for the
@@ -335,7 +340,9 @@ describe('managed configuration', () => {
         esStart.client.asInternalUser as unknown as Client
       );
       coreStart.savedObjects.createInternalRepository.mockReturnValue(savedObjectsClient);
-      taskManagerStart = await taskManager.start(coreStart, {});
+      taskManagerStart = await taskManager.start(coreStart, {
+        licensing: licensingMock.createStart(),
+      });
 
       // force rxjs timers to fire when they are scheduled for setTimeout(0) as the
       // sinon fake timers cause them to stall. We need to do this a few times for the
@@ -420,7 +427,9 @@ describe('managed configuration', () => {
         esStart.client.asInternalUser as unknown as Client
       );
       coreStart.savedObjects.createInternalRepository.mockReturnValue(savedObjectsClient);
-      taskManagerStart = await taskManager.start(coreStart, {});
+      taskManagerStart = await taskManager.start(coreStart, {
+        licensing: licensingMock.createStart(),
+      });
 
       // force rxjs timers to fire when they are scheduled for setTimeout(0) as the
       // sinon fake timers cause them to stall

x-pack/platform/plugins/shared/task_manager/server/license_subscriber.test.ts

@@ -0,0 +1,52 @@
+/*
+ * Copyright Elasticsearch B.V. and/or licensed to Elasticsearch B.V. under one
+ * or more contributor license agreements. Licensed under the Elastic License
+ * 2.0; you may not use this file except in compliance with the Elastic License
+ * 2.0.
+ */
+
+import { LicenseSubscriber } from './license_subscriber';
+import { Subject } from 'rxjs';
+import { licensingMock } from '@kbn/licensing-plugin/server/mocks';
+import type { ILicense } from '@kbn/licensing-plugin/server';
+
+describe('LicenseSubscriber', () => {
+  afterEach(() => {
+    jest.resetAllMocks();
+  });
+
+  describe('getIsSecurityEnabled', () => {
+    test('should return true if security is enabled', () => {
+      const license: Subject<ILicense> = new Subject();
+      const licenseSubscriber = new LicenseSubscriber(license);
+
+      const basicLicense = licensingMock.createLicense({
+        license: { status: 'active', type: 'basic' },
+        features: { security: { isEnabled: true, isAvailable: true } },
+      });
+
+      license.next(basicLicense);
+      expect(licenseSubscriber.getIsSecurityEnabled()).toEqual(true);
+    });
+
+    test('should return false if security doesnt exist', () => {
+      const license: Subject<ILicense> = new Subject();
+      const licenseSubscriber = new LicenseSubscriber(license);
+
+      expect(licenseSubscriber.getIsSecurityEnabled()).toEqual(false);
+    });
+
+    test('should return false if security is disabled', () => {
+      const license: Subject<ILicense> = new Subject();
+      const licenseSubscriber = new LicenseSubscriber(license);
+
+      const basicLicense = licensingMock.createLicense({
+        license: { status: 'active', type: 'basic' },
+        features: { security: { isEnabled: false, isAvailable: true } },
+      });
+
+      license.next(basicLicense);
+      expect(licenseSubscriber.getIsSecurityEnabled()).toEqual(false);
+    });
+  });
+});

x-pack/platform/plugins/shared/task_manager/server/license_subscriber.ts

@@ -0,0 +1,38 @@
+/*
+ * Copyright Elasticsearch B.V. and/or licensed to Elasticsearch B.V. under one
+ * or more contributor license agreements. Licensed under the Elastic License
+ * 2.0; you may not use this file except in compliance with the Elastic License
+ * 2.0.
+ */
+
+import type { ILicense } from '@kbn/licensing-plugin/server';
+import type { Observable, Subscription } from 'rxjs';
+
+export class LicenseSubscriber {
+  private subscription: Subscription;
+
+  private licenseState?: ILicense;
+
+  constructor(license: Observable<ILicense>) {
+    this.getIsSecurityEnabled = this.getIsSecurityEnabled.bind(this);
+    this.updateState = this.updateState.bind(this);
+
+    this.subscription = license.subscribe(this.updateState);
+  }
+
+  private updateState(license: ILicense | undefined) {
+    this.licenseState = license;
+  }
+
+  public getIsSecurityEnabled() {
+    if (!this.licenseState || !this.licenseState.isAvailable) {
+      return false;
+    }
+
+    return this.licenseState.getFeature('security').isEnabled;
+  }
+
+  public cleanup() {
+    this.subscription.unsubscribe();
+  }
+}

x-pack/platform/plugins/shared/task_manager/server/plugin.test.ts

@@ -14,6 +14,7 @@ import { cloudMock } from '@kbn/cloud-plugin/public/mocks';
 import { taskPollingLifecycleMock } from './polling_lifecycle.mock';
 import { TaskPollingLifecycle } from './polling_lifecycle';
 import type { TaskPollingLifecycle as TaskPollingLifecycleClass } from './polling_lifecycle';
+import { licensingMock } from '@kbn/licensing-plugin/server/mocks';
 
 let mockTaskPollingLifecycle = taskPollingLifecycleMock.create({});
 jest.mock('./polling_lifecycle', () => {
@@ -140,6 +141,7 @@ describe('TaskManagerPlugin', () => {
       taskManagerPlugin.setup(coreMock.createSetup(), { usageCollection: undefined });
       taskManagerPlugin.start(coreStart, {
         cloud: cloudMock.createStart(),
+        licensing: licensingMock.createStart(),
       });
 
       expect(TaskPollingLifecycle as jest.Mock<TaskPollingLifecycleClass>).toHaveBeenCalledTimes(1);
@@ -154,6 +156,7 @@ describe('TaskManagerPlugin', () => {
       taskManagerPlugin.setup(coreMock.createSetup(), { usageCollection: undefined });
       taskManagerPlugin.start(coreStart, {
         cloud: cloudMock.createStart(),
+        licensing: licensingMock.createStart(),
       });
 
       expect(TaskPollingLifecycle as jest.Mock<TaskPollingLifecycleClass>).not.toHaveBeenCalled();
@@ -170,6 +173,7 @@ describe('TaskManagerPlugin', () => {
       taskManagerPlugin.setup(coreMock.createSetup(), { usageCollection: undefined });
       taskManagerPlugin.start(coreStart, {
         cloud: cloudMock.createStart(),
+        licensing: licensingMock.createStart(),
       });
 
       expect(TaskPollingLifecycle as jest.Mock<TaskPollingLifecycleClass>).toHaveBeenCalledTimes(1);
@@ -188,6 +192,7 @@ describe('TaskManagerPlugin', () => {
       taskManagerPlugin.setup(coreMock.createSetup(), { usageCollection: undefined });
       taskManagerPlugin.start(coreStart, {
         cloud: cloudMock.createStart(),
+        licensing: licensingMock.createStart(),
       });
 
       await taskManagerPlugin.stop();
@@ -204,6 +209,7 @@ describe('TaskManagerPlugin', () => {
       taskManagerPlugin.setup(coreMock.createSetup(), { usageCollection: undefined });
       taskManagerPlugin.start(coreStart, {
         cloud: cloudMock.createStart(),
+        licensing: licensingMock.createStart(),
       });
 
       discoveryIsStarted.mockReturnValueOnce(true);

x-pack/platform/plugins/shared/task_manager/server/plugin.ts

@@ -23,6 +23,8 @@ import type {
 } from '@kbn/core/server';
 import type { CloudSetup, CloudStart } from '@kbn/cloud-plugin/server';
 import type { EncryptedSavedObjectsClient } from '@kbn/encrypted-saved-objects-shared';
+import type { LicensingPluginStart } from '@kbn/licensing-plugin/server';
+import type { PublicMethodsOf } from '@kbn/utility-types';
 import {
   registerDeleteInactiveNodesTaskDefinition,
   scheduleDeleteInactiveNodesTaskDefinition,
@@ -58,6 +60,7 @@ import {
   scheduleMarkRemovedTasksAsUnrecognizedDefinition,
 } from './removed_tasks/mark_removed_tasks_as_unrecognized';
 import { getElasticsearchAndSOAvailability } from './lib/get_es_and_so_availability';
+import { LicenseSubscriber } from './license_subscriber';
 
 export interface TaskManagerSetupContract {
   /**
@@ -92,6 +95,7 @@ export type TaskManagerStartContract = Pick<
   };
 
 export interface TaskManagerPluginsStart {
+  licensing: LicensingPluginStart;
   cloud?: CloudStart;
   usageCollection?: UsageCollectionStart;
 }
@@ -132,6 +136,7 @@ export class TaskManagerPlugin
   private heapSizeLimit: number = 0;
   private numOfKibanaInstances$: Subject<number> = new BehaviorSubject(1);
   private canEncryptSavedObjects: boolean;
+  private licenseSubscriber?: PublicMethodsOf<LicenseSubscriber>;
 
   constructor(private readonly initContext: PluginInitializerContext) {
     this.initContext = initContext;
@@ -286,8 +291,10 @@ export class TaskManagerPlugin
 
   public start(
     { http, savedObjects, elasticsearch, executionContext, security }: CoreStart,
-    { cloud }: TaskManagerPluginsStart
+    { cloud, licensing }: TaskManagerPluginsStart
   ): TaskManagerStartContract {
+    this.licenseSubscriber = new LicenseSubscriber(licensing.license$);
+
     const savedObjectsRepository = savedObjects.createInternalRepository([
       TASK_SO_NAME,
       BACKGROUND_TASK_NODE_SO_NAME,
@@ -320,6 +327,7 @@ export class TaskManagerPlugin
       requestTimeouts: this.config.request_timeouts,
       security,
       canEncryptSavedObjects: this.canEncryptSavedObjects,
+      getIsSecurityEnabled: this.licenseSubscriber?.getIsSecurityEnabled,
     });
 
     const isServerless = this.initContext.env.packageInfo.buildFlavor === 'serverless';
@@ -431,6 +439,8 @@ export class TaskManagerPlugin
   }
 
   public async stop() {
+    this.licenseSubscriber?.cleanup();
+
     // Stop polling for tasks
     if (this.taskPollingLifecycle) {
       this.taskPollingLifecycle.stop();