[8.19] [AI4DSOC] Add possibility to disable Stack Rules, Rules Settings and Maintenance window based on Serverless Tier (#214586) (#221998)

Author: tomsonpl

.buildkite/ftr_platform_stateful_configs.yml

@@ -138,6 +138,7 @@ enabled:
   - x-pack/test/alerting_api_integration/security_and_spaces/group2/config.ts
   - x-pack/test/alerting_api_integration/security_and_spaces/group3/config.ts
   - x-pack/test/alerting_api_integration/security_and_spaces/group4/config.ts
+  - x-pack/test/alerting_api_integration/security_and_spaces/group5/config.ts
   - x-pack/test/alerting_api_integration/security_and_spaces/group3/config_with_schedule_circuit_breaker.ts
   - x-pack/test/alerting_api_integration/security_and_spaces/group2/config_non_dedicated_task_runner.ts
   - x-pack/test/alerting_api_integration/security_and_spaces/group4/config_non_dedicated_task_runner.ts

config/serverless.security.search_ai_lake.yml

@@ -1 +1,24 @@
 # Security Search AI Lake tier config
+
+## Disable plugins
+xpack.osquery.enabled: false
+xpack.ml.ad.enabled: false
+xpack.ml.dfa.enabled: false
+
+## Disable plugin features
+xpack.alerting.maintenanceWindow.enabled: false
+xpack.alerting.rulesSettings.enabled: false
+xpack.trigger_actions_ui.rules.enabled: false
+
+xpack.features.overrides:
+  ### The following features are Security features hidden in Role management UI for this specific tier.
+  securitySolutionTimeline.hidden: true
+  securitySolutionNotes.hidden: true
+  siem.description: null
+  siemV2.description: null
+  securitySolutionSiemMigrations.hidden: true
+
+# Custom integrations/fleet settings
+xpack.fleet.agentless.isDefault: true
+xpack.fleet.integrationsHomeOverride: '/app/security/configurations/integrations'
+xpack.fleet.prereleaseEnabledByDefault: true

src/platform/packages/shared/kbn-alerts-ui-shared/src/maintenance_window_callout/index.tsx

@@ -52,8 +52,8 @@ export function MaintenanceWindowCallout({
   } = kibanaServices;
 
   const isMaintenanceWindowDisabled =
-    !capabilities[MAINTENANCE_WINDOW_FEATURE_ID].show &&
-    !capabilities[MAINTENANCE_WINDOW_FEATURE_ID].save;
+    !capabilities[MAINTENANCE_WINDOW_FEATURE_ID]?.show &&
+    !capabilities[MAINTENANCE_WINDOW_FEATURE_ID]?.save;
   const { data: activeMaintenanceWindows = [] } = useFetchActiveMaintenanceWindows(kibanaServices, {
     enabled: !isMaintenanceWindowDisabled,
   });

src/platform/test/plugin_functional/test_suites/core_plugins/rendering.ts

@@ -348,9 +348,12 @@ export default function ({ getService }: PluginFunctionalProviderContext) {
         'xpack.stack_connectors.enableExperimental (array?)',
         'xpack.trigger_actions_ui.enableExperimental (array?)',
         'xpack.trigger_actions_ui.enableGeoTrackingThresholdAlert (boolean?)',
+        'xpack.trigger_actions_ui.rules.enabled (boolean?)',
         'xpack.timelines.enableExperimental (array?)',
         'xpack.alerting.rules.run.alerts.max (number?)',
         'xpack.alerting.disabledRuleTypes (array?)',
+        'xpack.alerting.maintenanceWindow.enabled (boolean?)',
+        'xpack.alerting.rulesSettings.enabled (boolean?)',
         'xpack.upgrade_assistant.featureSet.migrateSystemIndices (boolean?)',
         'xpack.upgrade_assistant.featureSet.mlSnapshots (boolean?)',
         'xpack.upgrade_assistant.featureSet.reindexCorrectiveActions (boolean?)',

x-pack/platform/plugins/shared/alerting/common/index.ts

@@ -260,4 +260,3 @@ export const DELETE_MAINTENANCE_WINDOW_API_PATH = `${BASE_MAINTENANCE_WINDOW_API
 
 export const ALERTING_FEATURE_ID = 'alerts';
 export const MONITORING_HISTORY_LIMIT = 200;
-export const ENABLE_MAINTENANCE_WINDOWS = true;

x-pack/platform/plugins/shared/alerting/public/pages/maintenance_windows/index.tsx

@@ -68,8 +68,8 @@ export const MaintenanceWindowsPage = React.memo(() => {
   }, [navigateToCreateMaintenanceWindow]);
 
   const refreshData = useCallback(() => refetch(), [refetch]);
-  const showWindowMaintenance = capabilities[MAINTENANCE_WINDOW_FEATURE_ID].show;
-  const writeWindowMaintenance = capabilities[MAINTENANCE_WINDOW_FEATURE_ID].save;
+  const showWindowMaintenance = capabilities[MAINTENANCE_WINDOW_FEATURE_ID]?.show;
+  const writeWindowMaintenance = capabilities[MAINTENANCE_WINDOW_FEATURE_ID]?.save;
   const isNotFiltered = search === '' && selectedStatus.length === 0;
 
   const showEmptyPrompt =

x-pack/platform/plugins/shared/alerting/public/plugin.test.ts

@@ -26,6 +26,9 @@ const mockAlertingUIConfig: AlertingUIConfig = {
       },
     },
   },
+  maintenanceWindow: {
+    enabled: true,
+  },
 };
 
 const mockInitializerContext = coreMock.createPluginInitializerContext(mockAlertingUIConfig);

x-pack/platform/plugins/shared/alerting/public/plugin.ts

@@ -17,8 +17,8 @@ import type { ServerlessPluginStart } from '@kbn/serverless/public';
 import type { AlertNavigationHandler } from './alert_navigation_registry';
 import { AlertNavigationRegistry } from './alert_navigation_registry';
 import { loadRule, loadRuleType } from './services/rule_api';
+import { MAINTENANCE_WINDOWS_APP_ID } from '../common';
 import type { Rule } from '../common';
-import { ENABLE_MAINTENANCE_WINDOWS, MAINTENANCE_WINDOWS_APP_ID } from '../common';
 
 export interface PluginSetupContract {
   /**
@@ -82,6 +82,7 @@ export interface AlertingUIConfig {
       };
     };
   };
+  maintenanceWindow: { enabled: boolean };
 }
 
 export class AlertingPublicPlugin
@@ -115,7 +116,7 @@ export class AlertingPublicPlugin
       handler: AlertNavigationHandler
     ) => this.alertNavigationRegistry!.registerDefault(applicationId, handler);
 
-    if (ENABLE_MAINTENANCE_WINDOWS) {
+    if (this.config.maintenanceWindow?.enabled) {
       plugins.management.sections.section.insightsAndAlerting.registerApp({
         id: MAINTENANCE_WINDOWS_APP_ID,
         title: i18n.translate('xpack.alerting.management.section.title', {

x-pack/platform/plugins/shared/alerting/server/config.test.ts

@@ -21,6 +21,9 @@ describe('config validation', () => {
           "interval": "5m",
           "removalDelay": "1h",
         },
+        "maintenanceWindow": Object {
+          "enabled": true,
+        },
         "maxEphemeralActionsPerAlert": 10,
         "rules": Object {
           "maxScheduledPerMinute": 32000,
@@ -39,6 +42,7 @@ describe('config validation', () => {
         },
         "rulesSettings": Object {
           "cacheInterval": 60000,
+          "enabled": true,
         },
       }
     `);

x-pack/platform/plugins/shared/alerting/server/config.ts

@@ -77,11 +77,15 @@ export const configSchema = schema.object({
   cancelAlertsOnRuleTimeout: schema.boolean({ defaultValue: true }),
   rules: rulesSchema,
   rulesSettings: schema.object({
+    enabled: schema.boolean({ defaultValue: true }),
     cacheInterval: schema.number({ defaultValue: DEFAULT_CACHE_INTERVAL_MS }),
   }),
   disabledRuleTypes: schema.maybe(
     schema.arrayOf(schema.string({ minLength: 1 }), { defaultValue: [] })
   ),
+  maintenanceWindow: schema.object({
+    enabled: schema.boolean({ defaultValue: true }),
+  }),
 });
 
 export type AlertingConfig = TypeOf<typeof configSchema>;