Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[8.x] [EDR Workflows] The host isolation exception tab is hidden on the basic license if no artifacts (#192562) #193711

Merged
merged 1 commit into from
Sep 23, 2024

Conversation

kibanamachine
Copy link
Contributor

Backport

This will backport the following commits from main to 8.x:

Questions ?

Please refer to the Backport tool documentation

…ic license if no artifacts (elastic#192562)

This PR updates how the Host Isolation Exceptions tab is displayed based
on the user’s permissions and license. The tab is always visible to
platinum+ users. For lower-tier licenses, a check is performed: if a
user has previously defined host isolation exceptions, they will see the
tab and be able to view or remove existing exceptions. If they haven’t,
the tab will be hidden, and the functionality will be inaccessible.

Previously, even if a user didn’t have access to host isolation
exceptions, they could still see and enter the Host Isolation Exceptions
tab.

To test locally:
ESS:
1. Start ES + Kibana the regular way, with the default `trial` license.
2. Add HIE
3. Downgrade license (https://github.com/elastic/pzl-es-tools)
4. Verify that the license had been downgraded

Serverless:
1. Start Serverless ES `yarn es serverless --clean --teardown --kill -E
xpack.security.authc.api_key.enabled=true -E http.host=0.0.0.0
--projectType security`
2. Start Serverless Kibana `yarn serverless-security`
3. Add HIE
4. Modify `config/serverless.security.yml` to security and endpoint
essential
5. Wait for Kibana to reload

ESS:

https://github.com/user-attachments/assets/75527af7-9d06-4da7-9e86-6ce6b22ac147

Serverless:

https://github.com/user-attachments/assets/e89bd642-9e99-4a22-8b42-5997f7333ea6

---------

Co-authored-by: Ash <[email protected]>
(cherry picked from commit 636baad)
@kibana-ci
Copy link
Collaborator

💛 Build succeeded, but was flaky

Failed CI Steps

Metrics [docs]

Module Count

Fewer modules leads to a faster build time

id before after diff
securitySolution 5813 5814 +1

Async chunks

Total size of all lazy-loaded chunks that will be downloaded as the user navigates the app

id before after diff
securitySolution 20.4MB 20.4MB +1.9KB
Unknown metric groups

References to deprecated APIs

id before after diff
securitySolution 470 458 -12

To update your PR or re-run it, just comment with:
@elasticmachine merge upstream

cc @szwarckonrad

@kibanamachine kibanamachine merged commit 7ceb68f into elastic:8.x Sep 23, 2024
38 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants