[Cloud Security] Deprecate vulnerability data views

[CohenIdo]

solves:

• Findings page - replace latest vulnerabilities data view with global data view kibana#190387

Associated Kibana PR:

• [Cloud Security] use global cdr vuln data view kibana#191581

Summary:

Beginning with version 8.16, the Cloud Security Posture integration's data view will be deprecated. Instead, CDR data views will be used, which will be installed independently rather than as an integration asset.

[elasticmachine]

🚀 Benchmarks report

To see the full report comment with /test benchmark fullreport

[maxcold]

@CohenIdo should we also add it to the changelog?
Btw , I realized that I don't really understand the following - am I correct that fixing a bug in an older version of the integration is not possible, as in released say 1.8.1 now

[elastic-sonarqube]

Quality Gate passed

Issues
0 New issues
0 Fixed issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube

[elasticmachine]

💚 Build Succeeded

• Buildkite Build
• Commit: 9b71bdd

History

• 💚 Build #15115 succeeded 3e31668

[CohenIdo]

@CohenIdo should we also add it to the changelog?
I added it to the changelog, probably you commented before I pushed it.

am I correct that fixing a bug in an older version of the integration is not possible, as in released say 1.8.1 now

AFAIK it depends on the stack version:

# 1.8.x - 8.13.x
# 1.7.x - 8.12.x
# 1.6.x - 8.11.x
# 1.5.x - 8.10.x
# 1.4.x - 8.9.x
# 1.3.x - 8.8.x
# 1.2.x - 8.7.x

So for example if we want to push fix for a bug in 8.11 we can release (I guess) a patch for 1.6.x).
@maxcold Is it answer your question?

[maxcold]

@CohenIdo but in this new 1.6.x version the index pattern that you deleted will be missing, and it won't work for 8.11. Am I missing smth?

[CohenIdo]

@CohenIdo but in this new 1.6.x version the index pattern that you deleted will be missing, and it won't work for 8.11. Am I missing smth?

The change we introduce here will not be available for stack 8.11 since this integration version requires stack 8.16^.

[maxcold]

@CohenIdo the thing I was missing is the process of backporting a change into an older package version https://www.elastic.co/guide/en/integrations-developer/current/developer-workflow-support-old-package.html

[elasticmachine]

Package cloud_security_posture - 1.11.0-preview05 containing this change is available at https://epr.elastic.co/search?package=cloud_security_posture

[elastic-vault-github-plugin-prod]

Package cloud_security_posture - 1.11.0 containing this change is available at https://epr.elastic.co/package/cloud_security_posture/1.11.0/