Skip to content

[Fleet][Security Solution] Enable Space Awareness feature for Fleet and Security Solution#227862

Merged
paul-tavares merged 18 commits intoelastic:mainfrom
paul-tavares:task/olm-12866-enable-spaces-in-main
Jul 17, 2025
Merged

[Fleet][Security Solution] Enable Space Awareness feature for Fleet and Security Solution#227862
paul-tavares merged 18 commits intoelastic:mainfrom
paul-tavares:task/olm-12866-enable-spaces-in-main

Conversation

@paul-tavares
Copy link
Copy Markdown
Contributor

Summary

  • PR enables the Space Awareness features for both Fleet and Security Solution (Endpoint Management) for release in Serverless.
    • This is a cherry-pick of commit: 206b67b
    • Feature is also scheduled for release with v9.1.0

@paul-tavares paul-tavares self-assigned this Jul 14, 2025
@paul-tavares paul-tavares added release_note:skip Skip the PR/issue when compiling release notes backport:skip This PR does not require backporting Team:Defend Workflows “EDR Workflows” sub-team of Security Solution v9.2.0 labels Jul 14, 2025
@paul-tavares
Copy link
Copy Markdown
Contributor Author

/ci

@paul-tavares
Copy link
Copy Markdown
Contributor Author

/ci

@paul-tavares
Copy link
Copy Markdown
Contributor Author

/ci

@paul-tavares paul-tavares marked this pull request as ready for review July 14, 2025 21:34
@paul-tavares paul-tavares requested review from a team as code owners July 14, 2025 21:34
@elasticmachine
Copy link
Copy Markdown
Contributor

Pinging @elastic/security-defend-workflows (Team:Defend Workflows)

@botelastic botelastic Bot added the Team:Fleet Team label for Observability Data Collection Fleet team label Jul 14, 2025
@elasticmachine
Copy link
Copy Markdown
Contributor

Pinging @elastic/fleet (Team:Fleet)

@paul-tavares paul-tavares requested review from szwarckonrad and removed request for ashokaditya July 14, 2025 21:35
Copy link
Copy Markdown
Contributor

@MichelLosier MichelLosier left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

:shipit:

Copy link
Copy Markdown
Contributor

@gergoabraham gergoabraham left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

just adding comments to the skipped RBAC tests for now

Copy link
Copy Markdown
Member

@florent-leborgne florent-leborgne left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Hi, docs output LGTM overall but will this endpoint be available for any versions, or from a specific stack version only?

If there is a version requirement, it should be specified with an availability attribute like this I believe (see example):

options: {
        availability: {
          since: '9.1.0',
          stability: 'stable',
        },

paul-tavares and others added 5 commits July 15, 2025 14:53
…t --include-path /api/status --include-path /api/alerting/rule/ --include-path /api/alerting/rules --include-path /api/actions --include-path /api/security/role --include-path /api/spaces --include-path /api/streams --include-path /api/fleet --include-path /api/dashboards --include-path /api/saved_objects/_import --include-path /api/saved_objects/_export --include-path /api/maintenance_window --update'
Copy link
Copy Markdown
Member

@florent-leborgne florent-leborgne left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM for docs

Copy link
Copy Markdown
Contributor

@dokmic dokmic left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Core changes LGTM as they have already been reviewed and discussed in #222230.

@elasticmachine
Copy link
Copy Markdown
Contributor

💛 Build succeeded, but was flaky

Failed CI Steps

Test Failures

  • [job] [logs] FTR Configs #39 / serverless observability UI Serverless Observability Cases Configure Case Custom fields adds a custom field

Metrics [docs]

Public APIs missing comments

Total count of every public API that lacks a comment. Target amount is 0. Run node scripts/build_api_docs --plugin [yourplugin] --stats comments for more detailed information.

id before after diff
fleet 1436 1437 +1

Page load bundle

Size of the bundles that are downloaded on every page load. Target size is below 100kb

id before after diff
fleet 166.9KB 167.0KB +89.0B
Unknown metric groups

API count

id before after diff
fleet 1567 1568 +1

History

cc @paul-tavares

Copy link
Copy Markdown
Contributor

@azasypkin azasypkin left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Changes in security tests LGTM.

'endpoint_list_read',
'workflow_insights_all',
'workflow_insights_read',
'global_artifact_management_all',
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

question: just for my understanding - how (conceptually) does space awareness in Fleet and the Security solution relate to the availability of the Global Artifacts management feature privilege?

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@azasypkin - Thanks for the review. This new Global Artifact Management privilege is for the use in Security Solution (Elastic Defend Endpoint Management) and it allows users in security to manage Endpoint artifacts (a type of "rule" or "exception") that are sent to all hosts across all spaces. The docs draft that explains a bit more about this and overall impact of artifacts due to the introduction of spaces feature is here case you like to get a bit more info. on it.

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Got it, thanks for clarifying this for me!

@paul-tavares paul-tavares enabled auto-merge (squash) July 17, 2025 20:23
@paul-tavares paul-tavares merged commit 9bf61b9 into elastic:main Jul 17, 2025
12 checks passed
@paul-tavares paul-tavares deleted the task/olm-12866-enable-spaces-in-main branch July 17, 2025 20:45
Bluefinger pushed a commit to Bluefinger/kibana that referenced this pull request Jul 22, 2025
…nd Security Solution (elastic#227862)

## Summary

- PR enables the Space Awareness features for both Fleet and Security
Solution (Endpoint Management) for release in Serverless.
- This is a cherry-pick of commit:
elastic@206b67b
    - Feature is also scheduled for release with `v9.1.0`

---------

Co-authored-by: kibanamachine <42973632+kibanamachine@users.noreply.github.com>
Co-authored-by: MichelLosier <michel.losier@elastic.co>
kertal pushed a commit to kertal/kibana that referenced this pull request Jul 25, 2025
…nd Security Solution (elastic#227862)

## Summary

- PR enables the Space Awareness features for both Fleet and Security
Solution (Endpoint Management) for release in Serverless.
- This is a cherry-pick of commit:
elastic@206b67b
    - Feature is also scheduled for release with `v9.1.0`

---------

Co-authored-by: kibanamachine <42973632+kibanamachine@users.noreply.github.com>
Co-authored-by: MichelLosier <michel.losier@elastic.co>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

backport:skip This PR does not require backporting release_note:skip Skip the PR/issue when compiling release notes Team:Defend Workflows “EDR Workflows” sub-team of Security Solution Team:Fleet Team label for Observability Data Collection Fleet team v9.2.0

Projects

None yet

Development

Successfully merging this pull request may close these issues.