From 61efc394296edc231183484bdba375dd709169c6 Mon Sep 17 00:00:00 2001 From: Aleksandr Maus Date: Tue, 1 Oct 2024 16:47:15 -0400 Subject: [PATCH 1/2] [SEI] Ensure deprecated and rsa2elk integrations are excluded from Serverless --- config/serverless.oblt.yml | 11 +++++++++++ config/serverless.security.yml | 11 +++++++++++ 2 files changed, 22 insertions(+) diff --git a/config/serverless.oblt.yml b/config/serverless.oblt.yml index 67b0cfe6ab4d5..921eb96200369 100644 --- a/config/serverless.oblt.yml +++ b/config/serverless.oblt.yml @@ -165,6 +165,17 @@ xpack.fleet.internal.registry.excludePackages: [ # Profiling integrations 'profiler_agent', + + # Removed from serverless + 'bluecoat', + 'cylance', + 'f5', + 'fortinet_forticlient', + 'juniper_junos', + 'juniper_netscreen', + 'netscout', + 'radware', + 'tomcat', ] ## Required for force installation of integration packages diff --git a/config/serverless.security.yml b/config/serverless.security.yml index 39346310f78f0..bd0efd267c77b 100644 --- a/config/serverless.security.yml +++ b/config/serverless.security.yml @@ -92,6 +92,17 @@ xpack.fleet.internal.registry.excludePackages: [ # ML integrations 'dga', + + # Removed from serverless + 'bluecoat', + 'cylance', + 'f5', + 'fortinet_forticlient', + 'juniper_junos', + 'juniper_netscreen', + 'netscout', + 'radware', + 'tomcat', ] # fleet_server package installed to publish agent metrics xpack.fleet.packages: From 5fcdad0c19a8d88e5716bd56d99715d3bf5a0730 Mon Sep 17 00:00:00 2001 From: Andrew Kroh Date: Wed, 4 Dec 2024 10:46:17 -0500 Subject: [PATCH 2/2] Add same "Deprecated security integrations" list to oblt Make the oblt and security serverless configs similar. --- config/serverless.oblt.yml | 22 ++++++++++------------ 1 file changed, 10 insertions(+), 12 deletions(-) diff --git a/config/serverless.oblt.yml b/config/serverless.oblt.yml index 86eb7887b576b..4f2e5a0883b52 100644 --- a/config/serverless.oblt.yml +++ b/config/serverless.oblt.yml @@ -157,28 +157,26 @@ xpack.fleet.internal.registry.excludePackages: [ 'cloud_defend', 'security_detection_engine', - # Removed in 8.11 integrations + # Deprecated security integrations + 'bluecoat', 'cisco', - 'microsoft', - 'symantec', 'cyberark', - - # ML integrations - 'dga', - - # Profiling integrations - 'profiler_agent', - - # Removed from serverless - 'bluecoat', 'cylance', 'f5', 'fortinet_forticlient', 'juniper_junos', 'juniper_netscreen', + 'microsoft', 'netscout', 'radware', + 'symantec', 'tomcat', + + # ML integrations + 'dga', + + # Profiling integrations + 'profiler_agent', ] ## Required for force installation of integration packages