Skip to content

[Security Data Experience] Add permission verifier background tasks #257516

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
Omolola-Akinleye merged 41 commits into from
Apr 6, 2026
Merged

[Security Data Experience] Add permission verifier background tasks #257516

Show file tree
Hide file tree
Changes from 34 commits
Commits
Show all changes
41 commits
Select commit Hold shift + click to select a range
f76047d
first pass at permission on verifier tasks
Omolola-Akinleye Mar 12, 2026
0d4fc27
Changes from make api-docs
kibanamachine Mar 12, 2026
fb94151
Changes from node scripts/check_mappings_update --fix
kibanamachine Mar 12, 2026
2aa7292
refactor permission verifier tasks
Omolola-Akinleye Mar 12, 2026
aae1bb1
Merge branch 'permission-verifier-background-tasks' of github.com:Omo…
Omolola-Akinleye Mar 16, 2026
d62e4c1
update verify permission task to follow otel-verifier integration man…
Omolola-Akinleye Mar 17, 2026
3af750f
Changes from node scripts/jest_integration -u src/core/server/integra…
kibanamachine Mar 18, 2026
3c2b7a0
fix queue to deploy one verication at a time
Omolola-Akinleye Mar 19, 2026
d896c5c
Merge branch 'permission-verifier-background-tasks' of github.com:Omo…
Omolola-Akinleye Mar 19, 2026
b23b4e4
Changes from node scripts/check_mappings_update --fix
kibanamachine Mar 19, 2026
d5755ac
Changes from make api-docs
kibanamachine Mar 19, 2026
690b5f7
add add policy templates,update task interval, refactor old code
Omolola-Akinleye Mar 20, 2026
61470e5
remove otel logs until permission verifier logs is finalize
Omolola-Akinleye Mar 20, 2026
80ec450
Changes from make api-docs
kibanamachine Mar 20, 2026
3d14cee
uncomment agentless api code
Omolola-Akinleye Mar 21, 2026
f0a14f1
Merge branch 'permission-verifier-background-tasks' of github.com:Omo…
Omolola-Akinleye Mar 21, 2026
c37aac5
update schema contract for otel verifier package policy
Omolola-Akinleye Mar 30, 2026
32bbd28
Merge upstream/main into permission-verifier-background-tasks
Omolola-Akinleye Mar 30, 2026
c3c1fd4
Update SO type hashes for fleet agent policies and cloud connector
Omolola-Akinleye Mar 30, 2026
368b4b7
Clean up verifier task, fix SO hashes, and preserve cloud connector s…
Omolola-Akinleye Mar 31, 2026
510a4f4
address pr concerns
Omolola-Akinleye Mar 31, 2026
e89e479
Changes from node scripts/jest_integration -u src/core/server/integra…
kibanamachine Mar 31, 2026
4bcb58a
fix schema issues
Omolola-Akinleye Mar 31, 2026
272eaee
Merge branch 'permission-verifier-background-tasks' of github.com:Omo…
Omolola-Akinleye Mar 31, 2026
3acef10
Changes from make api-docs
kibanamachine Mar 31, 2026
a2577a1
fix the verifier policy being created successfully
Omolola-Akinleye Mar 31, 2026
4ef1e13
Merge branch 'permission-verifier-background-tasks' of github.com:Omo…
Omolola-Akinleye Mar 31, 2026
e19a8d6
add create agentless deployment api
Omolola-Akinleye Apr 1, 2026
787e908
fix missing secret references
Omolola-Akinleye Apr 1, 2026
1478225
address fleet pr concerns
Omolola-Akinleye Apr 1, 2026
43b94ac
Changes from node scripts/jest_integration -u src/core/server/integra…
kibanamachine Apr 1, 2026
ca83b1e
Changes from make api-docs
kibanamachine Apr 1, 2026
47c0fd6
Update x-pack/platform/plugins/shared/fleet/server/tasks/agentless/ve…
Omolola-Akinleye Apr 2, 2026
f6e9bfe
Merge branch 'main' into permission-verifier-background-tasks
Omolola-Akinleye Apr 2, 2026
9468cc2
use lastest package changes, add unit tests, update interfaces
Omolola-Akinleye Apr 3, 2026
73ffeac
Merge branch 'permission-verifier-background-tasks' of github.com:Omo…
Omolola-Akinleye Apr 3, 2026
300db60
fix object schema
Omolola-Akinleye Apr 6, 2026
f9b5e8c
Changes from node scripts/jest_integration -u src/core/server/integra…
kibanamachine Apr 6, 2026
b5bd3c8
turn off the verification permission enablement by default
Omolola-Akinleye Apr 6, 2026
af999d1
Merge branch 'permission-verifier-background-tasks' of github.com:Omo…
Omolola-Akinleye Apr 6, 2026
472b72f
Merge branch 'main' into permission-verifier-background-tasks
Omolola-Akinleye Apr 6, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
60 changes: 60 additions & 0 deletions oas_docs/output/kibana.serverless.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -24487,6 +24487,8 @@ paths:
- count
maxItems: 1000
type: array
created_at:
type: string
data_output_id:
nullable: true
type: string
Expand Down Expand Up @@ -24538,6 +24540,9 @@ paths:
is_protected:
description: Indicates whether the agent policy has tamper protection enabled. Default false.
type: boolean
is_verifier:
description: Indicates this is a short-lived verifier policy used for OTel permission verification.
type: boolean
keep_monitoring_alive:
default: false
description: When set to true, monitoring will be enabled but logs/metrics collection will be disabled
Expand Down Expand Up @@ -25387,6 +25392,9 @@ paths:
type: boolean
is_protected:
type: boolean
is_verifier:
description: Indicates this is a short-lived verifier policy used for OTel permission verification.
type: boolean
keep_monitoring_alive:
default: false
description: When set to true, monitoring will be enabled but logs/metrics collection will be disabled
Expand Down Expand Up @@ -25594,6 +25602,8 @@ paths:
- count
maxItems: 1000
type: array
created_at:
type: string
data_output_id:
nullable: true
type: string
Expand Down Expand Up @@ -25645,6 +25655,9 @@ paths:
is_protected:
description: Indicates whether the agent policy has tamper protection enabled. Default false.
type: boolean
is_verifier:
description: Indicates this is a short-lived verifier policy used for OTel permission verification.
type: boolean
keep_monitoring_alive:
default: false
description: When set to true, monitoring will be enabled but logs/metrics collection will be disabled
Expand Down Expand Up @@ -26481,6 +26494,8 @@ paths:
- count
maxItems: 1000
type: array
created_at:
type: string
data_output_id:
nullable: true
type: string
Expand Down Expand Up @@ -26532,6 +26547,9 @@ paths:
is_protected:
description: Indicates whether the agent policy has tamper protection enabled. Default false.
type: boolean
is_verifier:
description: Indicates this is a short-lived verifier policy used for OTel permission verification.
type: boolean
keep_monitoring_alive:
default: false
description: When set to true, monitoring will be enabled but logs/metrics collection will be disabled
Expand Down Expand Up @@ -27347,6 +27365,8 @@ paths:
- count
maxItems: 1000
type: array
created_at:
type: string
data_output_id:
nullable: true
type: string
Expand Down Expand Up @@ -27398,6 +27418,9 @@ paths:
is_protected:
description: Indicates whether the agent policy has tamper protection enabled. Default false.
type: boolean
is_verifier:
description: Indicates this is a short-lived verifier policy used for OTel permission verification.
type: boolean
keep_monitoring_alive:
default: false
description: When set to true, monitoring will be enabled but logs/metrics collection will be disabled
Expand Down Expand Up @@ -28246,6 +28269,9 @@ paths:
type: boolean
is_protected:
type: boolean
is_verifier:
description: Indicates this is a short-lived verifier policy used for OTel permission verification.
type: boolean
keep_monitoring_alive:
default: false
description: When set to true, monitoring will be enabled but logs/metrics collection will be disabled
Expand Down Expand Up @@ -28453,6 +28479,8 @@ paths:
- count
maxItems: 1000
type: array
created_at:
type: string
data_output_id:
nullable: true
type: string
Expand Down Expand Up @@ -28504,6 +28532,9 @@ paths:
is_protected:
description: Indicates whether the agent policy has tamper protection enabled. Default false.
type: boolean
is_verifier:
description: Indicates this is a short-lived verifier policy used for OTel permission verification.
type: boolean
keep_monitoring_alive:
default: false
description: When set to true, monitoring will be enabled but logs/metrics collection will be disabled
Expand Down Expand Up @@ -29432,6 +29463,8 @@ paths:
- count
maxItems: 1000
type: array
created_at:
type: string
data_output_id:
nullable: true
type: string
Expand Down Expand Up @@ -29483,6 +29516,9 @@ paths:
is_protected:
description: Indicates whether the agent policy has tamper protection enabled. Default false.
type: boolean
is_verifier:
description: Indicates this is a short-lived verifier policy used for OTel permission verification.
type: boolean
keep_monitoring_alive:
default: false
description: When set to true, monitoring will be enabled but logs/metrics collection will be disabled
Expand Down Expand Up @@ -36450,6 +36486,12 @@ paths:
vars:
additionalProperties: {}
type: object
verification_failed_at:
type: string
verification_started_at:
type: string
verification_status:
type: string
required:
- id
- name
Expand Down Expand Up @@ -36603,6 +36645,12 @@ paths:
vars:
additionalProperties: {}
type: object
verification_failed_at:
type: string
verification_started_at:
type: string
verification_status:
type: string
required:
- id
- name
Expand Down Expand Up @@ -36762,6 +36810,12 @@ paths:
vars:
additionalProperties: {}
type: object
verification_failed_at:
type: string
verification_started_at:
type: string
verification_status:
type: string
required:
- id
- name
Expand Down Expand Up @@ -36908,6 +36962,12 @@ paths:
vars:
additionalProperties: {}
type: object
verification_failed_at:
type: string
verification_started_at:
type: string
verification_status:
type: string
required:
- id
- name
Expand Down
60 changes: 60 additions & 0 deletions oas_docs/output/kibana.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -27062,6 +27062,8 @@ paths:
- count
maxItems: 1000
type: array
created_at:
type: string
data_output_id:
nullable: true
type: string
Expand Down Expand Up @@ -27113,6 +27115,9 @@ paths:
is_protected:
description: Indicates whether the agent policy has tamper protection enabled. Default false.
type: boolean
is_verifier:
description: Indicates this is a short-lived verifier policy used for OTel permission verification.
type: boolean
keep_monitoring_alive:
default: false
description: When set to true, monitoring will be enabled but logs/metrics collection will be disabled
Expand Down Expand Up @@ -27962,6 +27967,9 @@ paths:
type: boolean
is_protected:
type: boolean
is_verifier:
description: Indicates this is a short-lived verifier policy used for OTel permission verification.
type: boolean
keep_monitoring_alive:
default: false
description: When set to true, monitoring will be enabled but logs/metrics collection will be disabled
Expand Down Expand Up @@ -28169,6 +28177,8 @@ paths:
- count
maxItems: 1000
type: array
created_at:
type: string
data_output_id:
nullable: true
type: string
Expand Down Expand Up @@ -28220,6 +28230,9 @@ paths:
is_protected:
description: Indicates whether the agent policy has tamper protection enabled. Default false.
type: boolean
is_verifier:
description: Indicates this is a short-lived verifier policy used for OTel permission verification.
type: boolean
keep_monitoring_alive:
default: false
description: When set to true, monitoring will be enabled but logs/metrics collection will be disabled
Expand Down Expand Up @@ -29056,6 +29069,8 @@ paths:
- count
maxItems: 1000
type: array
created_at:
type: string
data_output_id:
nullable: true
type: string
Expand Down Expand Up @@ -29107,6 +29122,9 @@ paths:
is_protected:
description: Indicates whether the agent policy has tamper protection enabled. Default false.
type: boolean
is_verifier:
description: Indicates this is a short-lived verifier policy used for OTel permission verification.
type: boolean
keep_monitoring_alive:
default: false
description: When set to true, monitoring will be enabled but logs/metrics collection will be disabled
Expand Down Expand Up @@ -29922,6 +29940,8 @@ paths:
- count
maxItems: 1000
type: array
created_at:
type: string
data_output_id:
nullable: true
type: string
Expand Down Expand Up @@ -29973,6 +29993,9 @@ paths:
is_protected:
description: Indicates whether the agent policy has tamper protection enabled. Default false.
type: boolean
is_verifier:
description: Indicates this is a short-lived verifier policy used for OTel permission verification.
type: boolean
keep_monitoring_alive:
default: false
description: When set to true, monitoring will be enabled but logs/metrics collection will be disabled
Expand Down Expand Up @@ -30821,6 +30844,9 @@ paths:
type: boolean
is_protected:
type: boolean
is_verifier:
description: Indicates this is a short-lived verifier policy used for OTel permission verification.
type: boolean
keep_monitoring_alive:
default: false
description: When set to true, monitoring will be enabled but logs/metrics collection will be disabled
Expand Down Expand Up @@ -31028,6 +31054,8 @@ paths:
- count
maxItems: 1000
type: array
created_at:
type: string
data_output_id:
nullable: true
type: string
Expand Down Expand Up @@ -31079,6 +31107,9 @@ paths:
is_protected:
description: Indicates whether the agent policy has tamper protection enabled. Default false.
type: boolean
is_verifier:
description: Indicates this is a short-lived verifier policy used for OTel permission verification.
type: boolean
keep_monitoring_alive:
default: false
description: When set to true, monitoring will be enabled but logs/metrics collection will be disabled
Expand Down Expand Up @@ -32007,6 +32038,8 @@ paths:
- count
maxItems: 1000
type: array
created_at:
type: string
data_output_id:
nullable: true
type: string
Expand Down Expand Up @@ -32058,6 +32091,9 @@ paths:
is_protected:
description: Indicates whether the agent policy has tamper protection enabled. Default false.
type: boolean
is_verifier:
description: Indicates this is a short-lived verifier policy used for OTel permission verification.
type: boolean
keep_monitoring_alive:
default: false
description: When set to true, monitoring will be enabled but logs/metrics collection will be disabled
Expand Down Expand Up @@ -39025,6 +39061,12 @@ paths:
vars:
additionalProperties: {}
type: object
verification_failed_at:
type: string
verification_started_at:
type: string
verification_status:
type: string
required:
- id
- name
Expand Down Expand Up @@ -39178,6 +39220,12 @@ paths:
vars:
additionalProperties: {}
type: object
verification_failed_at:
type: string
verification_started_at:
type: string
verification_status:
type: string
required:
- id
- name
Expand Down Expand Up @@ -39337,6 +39385,12 @@ paths:
vars:
additionalProperties: {}
type: object
verification_failed_at:
type: string
verification_started_at:
type: string
verification_status:
type: string
required:
- id
- name
Expand Down Expand Up @@ -39483,6 +39537,12 @@ paths:
vars:
additionalProperties: {}
type: object
verification_failed_at:
type: string
verification_started_at:
type: string
verification_status:
type: string
required:
- id
- name
Expand Down
7 changes: 6 additions & 1 deletion packages/kbn-check-saved-objects-cli/current_fields.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -662,6 +662,7 @@
"is_managed",
"is_preconfigured",
"is_protected",
"is_verifier",
"keep_monitoring_alive",
"min_agent_version",
"monitoring_enabled",
Expand All @@ -687,7 +688,10 @@
"namespace",
"packagePolicyCount",
"updated_at",
"vars"
"vars",
"verification_failed_at",
"verification_started_at",
"verification_status"
],
"fleet-fleet-server-host": [
"host_urls",
Expand Down Expand Up @@ -804,6 +808,7 @@
"is_managed",
"is_preconfigured",
"is_protected",
"is_verifier",
"keep_monitoring_alive",
"min_agent_version",
"monitoring_diagnostics",
Expand Down
Loading
Loading