[mysql_enterprise] - update package-spec to 2.9.0

[taylor-swanson]

What does this PR do?

• Update package spec to 2.9.0

[git-generate]
go run github.com/andrewkroh/go-examples/ecs-update@latest -ecs-version=8.8.0 -ecs-git-ref=v8.8.0 -format-version=2.9.0 packages/mysql_enterprise

Checklist

• I have reviewed tips for building integrations and this pull request is aligned with them.
• I have verified that all data streams collect metrics or logs.
• I have added an entry to my package's changelog.yml file.
• I have verified that Kibana version constraints are current according to guidelines.

Related issues

• Relates elastic/security-team#5870

[elasticmachine]

💚 Build Succeeded

the below badges are clickable and redirect to their specific view in the CI or DOCS

Expand to view the summary

Build stats

• Start Time: 2023-07-31T15:59:46.392+0000

• Duration: 15 min 26 sec

Test stats 🧪

Test	Results
Failed	0
Passed	5
Skipped	0
Total	5

🤖 GitHub comments

Expand to view the GitHub comments

To re-run your PR in the CI, just comment with:

• /test : Re-trigger the build.

[elasticmachine]

🌐 Coverage report

Name	Metrics % (covered/total)	Diff
Packages	100.0% (1/1)	💚
Files	100.0% (1/1)	💚
Classes	100.0% (1/1)	💚
Methods	100.0% (13/13)	💚
Lines	95.283% (202/212)	❕
Conditionals	100.0% (0/0)	💚

[elasticmachine]

Pinging @elastic/security-external-integrations (Team:Security-External Integrations)

found failure

[efd6]

I stopped watching the tests too early, running this on v8.8.2 I see this:

FAILURE DETAILS:
mysql_enterprise/audit logfile:
[0] parsing field value failed: field "event.type" value "connection" is not one of the expected values (access, change, info, error) for any of the values of "event.category" (database)
[1] parsing field value failed: field "event.type" value "connection" is not one of the expected values (access, change, info, error, admin, creation, deletion, group, user) for any of the values of "event.category" (database, iam)

[taylor-swanson]

I stopped watching the tests too early, running this on v8.8.2 I see this:

FAILURE DETAILS:
mysql_enterprise/audit logfile:
[0] parsing field value failed: field "event.type" value "connection" is not one of the expected values (access, change, info, error) for any of the values of "event.category" (database)
[1] parsing field value failed: field "event.type" value "connection" is not one of the expected values (access, change, info, error, admin, creation, deletion, group, user) for any of the values of "event.category" (database, iam)

That is... bad. Our tests aren't catching this. I'll take a look at it.

[efd6]

The kibana.version is "^7.17.0 || ^8.0.0" so the tests are being run on 7.17.0, which doesn't have any concerns about these field value constraints.

[taylor-swanson]

The kibana.version is "^7.17.0 || ^8.0.0" so the tests are being run on 7.17.0, which doesn't have any concerns about these field value constraints.

That makes sense for CI, but it's also passing for me locally on 8.9.0 and I'm not sure why. Looking at the expected files, it should be failing.

[elasticmachine]

Package mysql_enterprise - 1.9.0 containing this change is available at https://epr.elastic.co/search?package=mysql_enterprise