Skip to content

trend_micro_vision_one: relocate common required options - #15427

Merged
chemamartinez merged 5 commits into
elastic:mainfrom
chemamartinez:14094-trend_micro_vision_one-fix-upgrade
Sep 24, 2025
Merged

trend_micro_vision_one: relocate common required options#15427
chemamartinez merged 5 commits into
elastic:mainfrom
chemamartinez:14094-trend_micro_vision_one-fix-upgrade

Conversation

@chemamartinez

@chemamartinez chemamartinez commented Sep 22, 2025

Copy link
Copy Markdown
Contributor

Proposed commit message

To avoid bug described at https://github.com/elastic/kibana/issues/235242,
common required settings such as URL and API Token have been located
under input level, as they were in previous versions.

This forces users to solve conflicts in the integration configuration during
upgrades from any version, avoiding the integration to gets broken once upgraded.

Also, new telemetry data stream added in 2.2.0 has been disabled by default,
so users that upgrade from 2.1.0 to this newest version don't face any
breaking change and can decide later if they want to enable the new feature or not.

Request tracing option has been moved to each data stream at the same time
to allow for more granular control of request tracing.

Checklist

  • I have reviewed tips for building integrations and this pull request is aligned with them.
  • I have verified that all data streams collect metrics or logs.
  • I have added an entry to my package's changelog.yml file.
  • I have verified that Kibana version constraints are current according to guidelines.
  • I have verified that any added dashboard complies with Kibana's Dashboard good practices

How to test this PR locally

2.4.0 fresh install

All options are shown as expected:

image image

Upgrade from < 2.2.0

As the telemetry data stream has been disabled by default, an upgrade from a version where this data stream didn't exist yet succeeds.

Once upgraded, the new data stream is disabled tough, so users would have to enable it manually.

Upgrade from > 2.2.0

When clicking on Upgrade to latest version the integration is upgraded but the policy upgrade fails due to conflicts. The breaking change forces users to update policies manually.

image

Once the policy is manually upgraded and conflicts are solved, the integration works as expected and all config options appear in the UI for future editions. This is expected in a breaking change according to our docs.

image

After the upgrade, everything works fine.

Related issues

@chemamartinez chemamartinez self-assigned this Sep 22, 2025
@chemamartinez chemamartinez added breaking change Integration:trend_micro_vision_one TrendAI Vision One bugfix Pull request that fixes a bug issue Team:Security-Service Integrations Security Service Integrations team [elastic/security-service-integrations] labels Sep 22, 2025
@chemamartinez
chemamartinez marked this pull request as ready for review September 22, 2025 18:37
@chemamartinez
chemamartinez requested a review from a team as a code owner September 22, 2025 18:37
@elasticmachine

Copy link
Copy Markdown

Pinging @elastic/security-service-integrations (Team:Security-Service Integrations)

@efd6 efd6 left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

In the upgrade path we see what is apparently the secret added twice (it's not). We could conceivably work around this by naming it with an input tag as well, but I think this would make the more common interaction with the option worse in order to improve this uncommon interaction. I think that probably fleet should do better when it sees that the names are the same and qualify them with the part of the configuration that they come from.

Screenshot from 2025-09-23 08-10-03

cc @nimarezainia ?

multi: false
required: false
show_user: false
description: The request tracer logs requests and responses to the agent's local file-system for debugging configurations. Enabling this request tracing compromises security and should only be used for debugging. See [documentation](https://www.elastic.co/guide/en/beats/filebeat/current/filebeat-input-httpjson.html#_request_tracer_filename) for details. No newline at end of file

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Add final new line.

multi: false
required: false
show_user: false
description: The request tracer logs requests and responses to the agent's local file-system for debugging configurations. Enabling this request tracing compromises security and should only be used for debugging. See [documentation](https://www.elastic.co/guide/en/beats/filebeat/current/filebeat-input-httpjson.html#_request_tracer_filename) for details. No newline at end of file

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Add final new line.

@chemamartinez
chemamartinez requested a review from efd6 September 23, 2025 07:27
@elastic-vault-github-plugin-prod

Copy link
Copy Markdown
Contributor

🚀 Benchmarks report

To see the full report comment with /test benchmark fullreport

@elasticmachine

Copy link
Copy Markdown

💚 Build Succeeded

History

cc @chemamartinez

@efd6 efd6 left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Have you confirmed that this fixes the upgrade issue by taking it through the problematic upgrade path manually?

@chemamartinez

Copy link
Copy Markdown
Contributor Author

Have you confirmed that this fixes the upgrade issue by taking it through the problematic upgrade path manually?

@efd6 yes, I have tested the upgrade path < 2.2.0 -> 2.3.0 -> 2.4.0 where 2.3.0 gets broken with the missing settings in the UI. The result is the same as the upgrade from > 2.2.0 described above.

The integration gets upgraded and conflicts in the policy have to be manually solved, after that, the integration is not affected by the bug anymore.

@chemamartinez
chemamartinez merged commit fe651fe into elastic:main Sep 24, 2025
9 checks passed
@chemamartinez
chemamartinez deleted the 14094-trend_micro_vision_one-fix-upgrade branch September 24, 2025 07:49
@elastic-vault-github-plugin-prod

Copy link
Copy Markdown
Contributor

Package trend_micro_vision_one - 2.4.0 containing this change is available at https://epr.elastic.co/package/trend_micro_vision_one/2.4.0/

tehbooom pushed a commit to tehbooom/integrations that referenced this pull request Nov 19, 2025
```
To avoid bug described at elastic/kibana#235242,
common required settings such as URL and API Token have been located
under input level, as they were in previous versions.

This forces users to solve conflicts in the integration configuration during
upgrades from any version, avoiding the integration to gets broken once upgraded.

Also, new telemetry data stream added in 2.2.0 has been disabled by default,
so users that upgrade from 2.1.0 to this newest version don't face any
breaking change and can decide later if they want to enable the new feature or not.

Request tracing option has been moved to each data stream at the same time
to allow for more granular control of request tracing.
```
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

breaking change bugfix Pull request that fixes a bug issue Integration:trend_micro_vision_one TrendAI Vision One Team:Security-Service Integrations Security Service Integrations team [elastic/security-service-integrations]

3 participants