[Fleet] Enable subfeature privileges (#203182)

elastic · Dec 10, 2024 · 418e50b · 418e50b
1 parent 93112b9
commit 418e50b
Show file tree

Hide file tree

Showing 4 changed files with 691 additions and 3 deletions.
diff --git a/x-pack/plugins/fleet/common/experimental_features.ts b/x-pack/plugins/fleet/common/experimental_features.ts
@@ -22,7 +22,7 @@ const _allowedExperimentalValues = {
   outputSecretsStorage: true,
   remoteESOutput: true,
   enableStrictKQLValidation: true,
-  subfeaturePrivileges: false,
+  subfeaturePrivileges: true,
   advancedPolicySettings: true,
   useSpaceAwareness: false,
   enableReusableIntegrationPolicies: true,

diff --git a/x-pack/test/api_integration/apis/security/privileges.ts b/x-pack/test/api_integration/apis/security/privileges.ts
@@ -62,7 +62,18 @@ export default function ({ getService }: FtrProviderContext) {
       slo: ['all', 'read', 'minimal_all', 'minimal_read'],
       searchPlayground: ['all', 'read', 'minimal_all', 'minimal_read'],
       searchInferenceEndpoints: ['all', 'read', 'minimal_all', 'minimal_read'],
-      fleetv2: ['all', 'read', 'minimal_all', 'minimal_read'],
+      fleetv2: [
+        'all',
+        'read',
+        'minimal_all',
+        'minimal_read',
+        'agents_all',
+        'agents_read',
+        'agent_policies_all',
+        'agent_policies_read',
+        'settings_all',
+        'settings_read',
+      ],
       fleet: ['all', 'read', 'minimal_all', 'minimal_read'],
       actions: ['all', 'read', 'minimal_all', 'minimal_read'],
       stackAlerts: ['all', 'read', 'minimal_all', 'minimal_read'],

diff --git a/x-pack/test/api_integration/apis/security/privileges_basic.ts b/x-pack/test/api_integration/apis/security/privileges_basic.ts
@@ -149,7 +149,18 @@ export default function ({ getService }: FtrProviderContext) {
             slo: ['all', 'read', 'minimal_all', 'minimal_read'],
             searchPlayground: ['all', 'read', 'minimal_all', 'minimal_read'],
             searchInferenceEndpoints: ['all', 'read', 'minimal_all', 'minimal_read'],
-            fleetv2: ['all', 'read', 'minimal_all', 'minimal_read'],
+            fleetv2: [
+              'agent_policies_all',
+              'agent_policies_read',
+              'agents_all',
+              'agents_read',
+              'all',
+              'minimal_all',
+              'minimal_read',
+              'read',
+              'settings_all',
+              'settings_read',
+            ],
             fleet: ['all', 'read', 'minimal_all', 'minimal_read'],
             actions: ['all', 'read', 'minimal_all', 'minimal_read'],
             stackAlerts: ['all', 'read', 'minimal_all', 'minimal_read'],