[Stack Connectors] The IUnsecuredActionsClient throws an error when executing a connector's action outside of the default space #219975
Description
Kibana version:
9.1 (dev)
Describe the bug:
When using the IUnsecuredActionsClient (via a background task) from a space other than default, the execution of the action fails with (second part of stack trace what comes out of the ActionsClient):
[2025-05-02T08:32:31.657-04:00][ERROR][plugins.securitySolution.CompleteExternalActionsTaskRunner.r5gnlp] 1 errors were encountered while running task:
ResponseActionsClientError: Attempt to execute [getRemoteScriptStatus] with connector [Name: SentinelOne Dev instance (space: foo) | Type: .sentinelone | ID: e1befb49-4f6f-4819-8d02-1f6848525e1b)] failed with : Saved object [action/e1befb49-4f6f-4819-8d02-1f6848525e1b] not found
at catchAndThrow (normalized_external_connector_client.ts:137:13)
at processTicksAndRejections (node:internal/process/task_queues:95:5)
at SentinelOneActionsClient.sendAction (sentinel_one_actions_client.ts:354:32)
at SentinelOneActionsClient.checkPendingRunningProcessesAction (sentinel_one_actions_client.ts:1477:11)
at SentinelOneActionsClient.processPendingActions (sentinel_one_actions_client.ts:1062:15)
at async Promise.all (index 0)
at CompleteExternalActionsTaskRunner.run (complete_external_actions_task_runner.ts:178:5)
at TaskManagerRunner.run (task_runner.ts:404:22)
----- original error -----
Error: Saved object [action/e1befb49-4f6f-4819-8d02-1f6848525e1b] not found
at Function.createGenericNotFoundError (saved_objects_error_helpers.ts:259:28)
at performGet (get.ts:73:36)
at processTicksAndRejections (node:internal/process/task_queues:95:5)
at SavedObjectsRepository.get (repository.ts:371:12)
at Object.getDecryptedAsInternalUser (index.ts:77:29)
at ActionExecutor.getActionInfoInternal (action_executor.ts:331:25)
at action_executor.ts:390:28
at ActionExecutor.executeUnsecured (action_executor.ts:199:12)
at SentinelOneActionsClient.sendAction (sentinel_one_actions_client.ts:354:32)
at SentinelOneActionsClient.checkPendingRunningProcessesAction (sentinel_one_actions_client.ts:1477:11)
at SentinelOneActionsClient.processPendingActions (sentinel_one_actions_client.ts:1062:15)
at async Promise.all (index 0)
at CompleteExternalActionsTaskRunner.run (complete_external_actions_task_runner.ts:178:5)
at TaskManagerRunner.run (task_runner.ts:404:22)
For reference:
- The unsecured client
execute()is used from here:
Steps to reproduce:
- Create a connector in a space other than
default - Use the unsecured action client to attempt to
execute()a sub-action