Merge branch 'main' of github.com:elastic/kibana into 126386-add-last…

…-seen-reporting
elastic · Jun 3, 2022 · 6c8bb41 · 6c8bb41
2 parents 63b3fd0 + 4b273d5
commit 6c8bb41
Show file tree

Hide file tree

Showing 842 changed files with 235,970 additions and 6,561 deletions.
diff --git a/.buildkite/ftr_configs.yml b/.buildkite/ftr_configs.yml
@@ -189,6 +189,7 @@ enabled:
   - x-pack/test/functional/config_security_basic.ts
   - x-pack/test/functional/config.ccs.ts
   - x-pack/test/functional/config.firefox.js
+  - x-pack/test/kubernetes_security/basic/config.ts
   - x-pack/test/licensing_plugin/config.public.ts
   - x-pack/test/licensing_plugin/config.ts
   - x-pack/test/lists_api_integration/security_and_spaces/config.ts
@@ -235,6 +236,7 @@ enabled:
   - x-pack/test/security_functional/saml.config.ts
   - x-pack/test/security_solution_endpoint_api_int/config.ts
   - x-pack/test/security_solution_endpoint/config.ts
+  - x-pack/test/session_view/basic/config.ts
   - x-pack/test/spaces_api_integration/security_and_spaces/config_basic.ts
   - x-pack/test/spaces_api_integration/security_and_spaces/config_trial.ts
   - x-pack/test/spaces_api_integration/spaces_only/config.ts

diff --git a/.buildkite/package-lock.json b/.buildkite/package-lock.json
diff --git a/.buildkite/package.json b/.buildkite/package.json
@@ -3,6 +3,6 @@
   "version": "1.0.0",
   "private": true,
   "dependencies": {
-    "kibana-buildkite-library": "git+https://git@github.com/elastic/kibana-buildkite-library#4ecaba35293fb635cf92ca205ee84fca52f19e2e"
+    "kibana-buildkite-library": "git+https://git@github.com/elastic/kibana-buildkite-library#6a73a417decc52f309ede3644577c9dca7b411a2"
   }
 }
diff --git a/.buildkite/pipelines/es_snapshots/promote.yml b/.buildkite/pipelines/es_snapshots/promote.yml
@@ -12,7 +12,3 @@ steps:
     command: .buildkite/scripts/steps/es_snapshots/promote.sh
     agents:
       queue: kibana-default
-  - wait
-  - trigger: kibana-agent-packer-cache
-    async: true
-    branches: main
diff --git a/.buildkite/scripts/steps/es_snapshots/promote.sh b/.buildkite/scripts/steps/es_snapshots/promote.sh
@@ -2,6 +2,7 @@
 
 set -euo pipefail
 
+echo "--- Promote snapshot"
 export ES_SNAPSHOT_MANIFEST="${ES_SNAPSHOT_MANIFEST:-"$(buildkite-agent meta-data get ES_SNAPSHOT_MANIFEST)"}"
 
 cat << EOF | buildkite-agent annotate --style "info"
@@ -11,3 +12,8 @@ cat << EOF | buildkite-agent annotate --style "info"
 EOF
 
 node "$(dirname "${0}")/promote_manifest.js" "$ES_SNAPSHOT_MANIFEST"
+
+if [[ "$BUILDKITE_BRANCH" == "main" ]]; then
+  echo "--- Trigger agent packer cache pipeline"
+  node .buildkite/scripts/steps/trigger_packer_cache.js
+fi
diff --git a/.buildkite/scripts/steps/trigger_packer_cache.js b/.buildkite/scripts/steps/trigger_packer_cache.js
@@ -0,0 +1,29 @@
+/*
+ * Copyright Elasticsearch B.V. and/or licensed to Elasticsearch B.V. under one
+ * or more contributor license agreements. Licensed under the Elastic License
+ * 2.0 and the Server Side Public License, v 1; you may not use this file except
+ * in compliance with, at your election, the Elastic License 2.0 or the Server
+ * Side Public License, v 1.
+ */
+
+const { BuildkiteClient } = require('kibana-buildkite-library');
+
+(async () => {
+  try {
+    const client = new BuildkiteClient();
+    const build = await client.triggerBuild('kibana-agent-packer-cache', {
+      commit: 'HEAD',
+      branch: 'main',
+      ignore_pipeline_branch_filters: true, // Required because of a Buildkite bug
+    });
+    console.log(`Triggered build: ${build.web_url}`);
+    process.exit(0);
+  } catch (ex) {
+    console.error('Buildkite API Error', ex.toString());
+    if (ex.response) {
+      console.error('HTTP Error Response Status', ex.response.status);
+      console.error('HTTP Error Response Body', ex.response.data);
+    }
+    process.exit(1);
+  }
+})();
diff --git a/dev_docs/contributing/how_we_use_github.mdx b/dev_docs/contributing/how_we_use_github.mdx
@@ -131,7 +131,7 @@ would be useful to all teams, talk to your team or tech lead about getting it ad
 
 ### Team labels
 
-Examples: `Team:Security`, `Team:Operations`.
+Examples: `Team:Security`, `Team:Operations`, `Team:Docs`.
 
 These labels map the issue to the team that owns the particular area. Part of the responsibilities of
 (todo) is to ensure every issue has at least a team or a project
@@ -178,3 +178,36 @@ it might mean the version the team is tentatively planning to merge a fix.
 
 Consult the owning team if you have a question about how a version label is meant
 to be used on an issue.
+
+### Issue type and workflow labels
+
+These labels categorize the type of work. For example:
+
+- `blocked`: Indicates the issue is currently blocked
+- `blocker`: Indicates that we should not release the product at the next
+   proposed version without the issue being resolved
+- `bug`: Indicates an unexpected problem or unintended behavior
+- `discuss`: Indicates that an issue is a discussion topic
+- `docs`/`documentation`: Indicates improvements or additions to documentation
+- `enhancement`: Indicates new feature or enhancement requests
+- `meta`: Indicates that the issue tracks tasks related to a project
+- `needs_triage`: Indicates that someone from the area team needs to investigate.
+
+These labels affect whether your PR appears in the release notes (that is to say,
+it's notable and affects our users) and which section it appears in. For example:
+
+- `release_note:breaking`: Specifies a breaking change and adds the PR to the Breaking changes section in the release notes
+- `release_note:deprecation`: Specifies a deprecated feature and adds the PR to the Deprecations section in the release notes
+- `release_note:enhancement`: Specifies a feature enhancement and adds the PR to the Enhancements section in the release notes
+- `release_note:feature`: Specifies a new feature and adds the PR to the  Features section in the release notes
+- `release_note:fix`: Specifies a bug fix and adds the PR to the Bug fixes section in the release notes
+- `release_node:plugin_api_changes`: Specifies a changes to the plugin API and adds the PR to the Plugin API changes page in the Developer Guide
+- `release_note:skip`: Omits the PR from release notes
+
+These labels related to backporting PRs:
+
+- `auto-backport`: Automatically backport this PR (to the branches related to
+   version labels) after it's merged
+- `backport`: This PR was backported
+- `backport:skip`: This PR does not require backporting
+
diff --git a/dev_docs/operations/operations_landing.mdx b/dev_docs/operations/operations_landing.mdx
@@ -50,5 +50,7 @@ layout: landing
     { pageId: "kibDevDocsOpsAmbientUiTypes" },
     { pageId: "kibDevDocsOpsTestSubjSelector" },
     { pageId: "kibDevDocsOpsBazelRunner" },
+    { pageId: "kibDevDocsOpsCliDevMode" },
+    { pageId: "kibDevDocsOpsEs" },
   ]}
 />
diff --git a/docs/api/cases/cases-api-find-cases.asciidoc b/docs/api/cases/cases-api-find-cases.asciidoc
@@ -111,94 +111,46 @@ The API returns a JSON object listing the retrieved cases. For example:
 {
   "page": 1,
   "per_page": 5,
-  "total": 2,
+  "total": 1,
   "cases": [
     {
       "id": "abed3a70-71bd-11ea-a0b2-c51ea50a58e2",
       "version": "WzExMCwxXQ==",
       "comments": [],
-      "totalComment": 0,
+      "totalComment": 1,
       "totalAlerts": 0,
-      "title": "The Long Game",
-      "tags": [
-        "windows",
-        "phishing"
-      ],
-      "description": "Windows 95",
-      "settings": {
-        "syncAlerts": true
-      },
+      "title": "Case title",
+      "tags": [ "phishing" ],
+      "description": "Case description",
+      "settings": { "syncAlerts": true },
       "owner": "securitySolution",
       "duration": null,
       "severity": "low",
       "closed_at": null,
       "closed_by": null,
-      "created_at": "2022-03-29T13:03:23.533Z",
-      "created_by": {
-        "email": "rhustler@email.com",
-        "full_name": "Rat Hustler",
-        "username": "rhustler"
-      },
-      "status": "open",
-      "updated_at": null,
-      "updated_by": null,
-      "connector": {
-        "id": "131d4448-abe0-4789-939d-8ef60680b498",
-        "name": "My connector",
-        "type": ".jira",
-        "fields": {
-          "issueType": "10006",
-          "priority": null,
-        }
-      }
-      "external_service": null,
-    },
-    {
-      "id": "a18b38a0-71b0-11ea-a0b2-c51ea50a58e2",
-      "version": "Wzk4LDFd",
-      "comments": [],
-      "totalComment": 0,
-      "totalAlerts": 0,
-      "title": "This case will self-destruct in 5 seconds",
-      "tags": [
-        "phishing",
-        "social engineering",
-        "bubblegum"
-      ],
-      "description": "James Bond clicked on a highly suspicious email banner advertising cheap holidays for underpaid civil servants. Operation bubblegum is active. Repeat - operation bubblegum is now active!",
-      "settings": {
-        "syncAlerts": false
-      },
-      "owner": "cases",
-      "duration": null,
-      "closed_at": null,
-      "closed_by": null,
-      "created_at": "2022-03-29T11:30:02.658Z",
+      "created_at": "2022-05-12T00:16:36.371Z",
       "created_by": {
-        "email": "ahunley@imf.usa.gov",
-        "full_name": "Alan Hunley",
-        "username": "ahunley"
+        "email": "jdoe@email.com",
+        "full_name": "Jane Doe",
+        "username": "jdoe"
       },
       "status": "open",
-      "updated_at": "2022-03-29T12:01:50.244Z",
+      "updated_at": "2022-05-12T00:27:58.162Z",
       "updated_by": {
-        "full_name": "Classified",
-        "email": "classified@hms.oo.gov.uk",
-        "username": "M"
+        "email": "jsmith@email.com",
+        "full_name": "Joe Smith",
+        "username": "jsmith"
       },
       "connector": {
-        "id": "131d4448-abe0-4789-939d-8ef60680b498",
-        "name": "My connector",
-        "type": ".resilient",
-        "fields": {
-          "issueTypes": [13],
-          "severityCode": 6,
-        }
+        "id": "none",
+        "name": "none",
+        "type": ".none",
+        "fields": null
       },
-      "external_service": null,
+      "external_service": null
     }
   ],
-  "count_open_cases": 2,
+  "count_open_cases": 1,
   "count_in_progress_cases":0,
   "count_closed_cases": 0
 }

diff --git a/docs/api/cases/cases-api-get-cases-by-alert.asciidoc b/docs/api/cases/cases-api-get-cases-by-alert.asciidoc
@@ -61,12 +61,8 @@ For example:
 --------------------------------------------------
 [
     {
-        "id": "8af6ac20-74f6-11ea-b83a-553aecdb28b6",
-        "title": "Case 1"
-    },
-    {
-        "id": "a18b38a0-71b0-11ea-a0b2-c51ea50a58e2",
-        "title": "Case 2"
+        "id": "06116b80-e1c3-11ec-be9b-9b1838238ee6",
+        "title":"security_case"
     }
 ]
 --------------------------------------------------
diff --git a/docs/api/cases/cases-api-get-configuration.asciidoc b/docs/api/cases/cases-api-get-configuration.asciidoc
@@ -44,7 +44,7 @@ read.
 
 [source,sh]
 --------------------------------------------------
-GET api/cases/configure?owner=securitySolution
+GET api/cases/configure?owner=cases
 --------------------------------------------------
 // KIBANA
 
@@ -54,19 +54,19 @@ The API returns the following type of information:
 --------------------------------------------------
 [
   {
-    "owner": "securitySolution",
     "closure_type": "close-by-user",
-    "created_at": "2020-03-30T13:31:38.083Z",
+    "owner": "cases",
+    "created_at": "2022-06-01T17:07:17.767Z",
     "created_by": {
-      "email": "admin@hms.gov.uk",
-      "full_name": "Mr Admin",
-      "username": "admin"
+      "email": "null",
+      "full_name": "null",
+      "username": "elastic"
     },
     "updated_at": null,
     "updated_by": null,
     "connector": {
       "id": "131d4448-abe0-4789-939d-8ef60680b498",
-      "name": "my-jira",
+      "name": "my-jira-connector",
       "type": ".jira",
       "fields": null
     },