Skip to content

Conversation

@pierrehilbert
Copy link
Contributor

Proposed commit message

Checklist

  • I have reviewed tips for building integrations and this pull request is aligned with them.
  • I have verified that all data streams collect metrics or logs.
  • I have added an entry to my package's changelog.yml file.
  • I have verified that Kibana version constraints are current according to guidelines.
  • I have verified that any added dashboard complies with Kibana's Dashboard good practices

Author's Checklist

  • [ ]

How to test this PR locally

Related issues

Screenshots

@pierrehilbert pierrehilbert requested a review from a team as a code owner October 16, 2025 15:28
@pierrehilbert pierrehilbert added the Team:Elastic-Agent-Data-Plane Agent Data Plane team [elastic/elastic-agent-data-plane] label Oct 16, 2025
@pierrehilbert pierrehilbert requested review from a team as code owners October 16, 2025 15:28
@pierrehilbert pierrehilbert added the Team:Security-Linux Platform Linux Platform Security team [elastic/sec-linux-platform] label Oct 16, 2025
@elasticmachine
Copy link

Pinging @elastic/sec-linux-platform (Team:Security-Linux Platform)

@elasticmachine
Copy link

Pinging @elastic/elastic-agent-data-plane (Team:Elastic-Agent-Data-Plane)

@cmacknz
Copy link
Member

cmacknz commented Oct 16, 2025

If this is broken how did it get through CI?

@pierrehilbert
Copy link
Contributor Author

If this is broken how did it get through CI?

This is the question we are currently addressing on slack to avoid this from happening again.
TL;DR: yaml syntax is okay but this is broken when the policy is rendered. We should definitively add some testing there!

@pierrehilbert pierrehilbert enabled auto-merge (squash) October 16, 2025 15:37
@andrewkroh andrewkroh added Integration:system System Team:Obs-InfraObs Observability Infrastructure Monitoring team [elastic/obs-infraobs-integrations] labels Oct 16, 2025
@elastic-vault-github-plugin-prod

🚀 Benchmarks report

Package system 👍(1) 💚(1) 💔(1)

Expand to view
Data stream Previous EPS New EPS Diff (%) Result
syslog 500000 333333.33 -166666.67 (-33.33%) 💔

To see the full report comment with /test benchmark fullreport

@pierrehilbert pierrehilbert merged commit 1f56202 into main Oct 16, 2025
7 checks passed
@elasticmachine
Copy link

💚 Build Succeeded

@pierrehilbert pierrehilbert deleted the system-yaml-syntax branch October 16, 2025 16:01
@elastic-vault-github-plugin-prod

Package system - 2.6.3 containing this change is available at https://epr.elastic.co/package/system/2.6.3/

nikitaindik added a commit to elastic/kibana that referenced this pull request Oct 21, 2025
**Resolves: #239356

🟢 Flaky test runner:
https://buildkite.com/elastic/kibana-flaky-test-suite-runner/builds/9560

# Summary
This PR unskips the Related Integrations Cypress tests. The tests were
previously failing because one of the Fleet packages they depend on
contained a YAML syntax error. That issue has now been fixed
([PR](elastic/integrations#15669)), so the tests
can be safely re-enabled.

The diff appears large, but the only functional change is the removal of
`.only`. The rest comes from Prettier formatting.
kibanamachine pushed a commit to kibanamachine/kibana that referenced this pull request Oct 21, 2025
…#239532)

**Resolves: elastic#239356

🟢 Flaky test runner:
https://buildkite.com/elastic/kibana-flaky-test-suite-runner/builds/9560

# Summary
This PR unskips the Related Integrations Cypress tests. The tests were
previously failing because one of the Fleet packages they depend on
contained a YAML syntax error. That issue has now been fixed
([PR](elastic/integrations#15669)), so the tests
can be safely re-enabled.

The diff appears large, but the only functional change is the removal of
`.only`. The rest comes from Prettier formatting.

(cherry picked from commit 1bfd3c1)
kibanamachine pushed a commit to kibanamachine/kibana that referenced this pull request Oct 21, 2025
…#239532)

**Resolves: elastic#239356

🟢 Flaky test runner:
https://buildkite.com/elastic/kibana-flaky-test-suite-runner/builds/9560

# Summary
This PR unskips the Related Integrations Cypress tests. The tests were
previously failing because one of the Fleet packages they depend on
contained a YAML syntax error. That issue has now been fixed
([PR](elastic/integrations#15669)), so the tests
can be safely re-enabled.

The diff appears large, but the only functional change is the removal of
`.only`. The rest comes from Prettier formatting.

(cherry picked from commit 1bfd3c1)
kibanamachine added a commit to elastic/kibana that referenced this pull request Oct 21, 2025
…239532) (#239869)

# Backport

This will backport the following commits from `main` to `9.2`:
- [[Security Solution] Unskip Related Integrations Cypress test
(#239532)](#239532)

<!--- Backport version: 9.6.6 -->

### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sorenlouv/backport)

<!--BACKPORT [{"author":{"name":"Nikita
Indik","email":"nikita.indik@elastic.co"},"sourceCommit":{"committedDate":"2025-10-21T09:00:12Z","message":"[Security
Solution] Unskip Related Integrations Cypress test
(#239532)\n\n**Resolves:
https://github.com/elastic/kibana/issues/239356**\n\n🟢 Flaky test
runner:\nhttps://buildkite.com/elastic/kibana-flaky-test-suite-runner/builds/9560\n\n#
Summary\nThis PR unskips the Related Integrations Cypress tests. The
tests were\npreviously failing because one of the Fleet packages they
depend on\ncontained a YAML syntax error. That issue has now been
fixed\n([PR](elastic/integrations#15669)), so
the tests\ncan be safely re-enabled.\n\nThe diff appears large, but the
only functional change is the removal of\n`.only`. The rest comes from
Prettier
formatting.","sha":"1bfd3c1046ae74295d77a33d68a0aa91071ce5e5","branchLabelMapping":{"^v9.3.0$":"main","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["release_note:skip","Team:Detections
and Resp","Team: SecuritySolution","Team:Detection Rule
Management","Feature:Related
Integrations","backport:version","v9.2.0","v9.3.0","v9.1.6","v8.19.6"],"title":"[Security
Solution] Unskip Related Integrations Cypress
test","number":239532,"url":"https://github.com/elastic/kibana/pull/239532","mergeCommit":{"message":"[Security
Solution] Unskip Related Integrations Cypress test
(#239532)\n\n**Resolves:
https://github.com/elastic/kibana/issues/239356**\n\n🟢 Flaky test
runner:\nhttps://buildkite.com/elastic/kibana-flaky-test-suite-runner/builds/9560\n\n#
Summary\nThis PR unskips the Related Integrations Cypress tests. The
tests were\npreviously failing because one of the Fleet packages they
depend on\ncontained a YAML syntax error. That issue has now been
fixed\n([PR](elastic/integrations#15669)), so
the tests\ncan be safely re-enabled.\n\nThe diff appears large, but the
only functional change is the removal of\n`.only`. The rest comes from
Prettier
formatting.","sha":"1bfd3c1046ae74295d77a33d68a0aa91071ce5e5"}},"sourceBranch":"main","suggestedTargetBranches":["9.2","9.1","8.19"],"targetPullRequestStates":[{"branch":"9.2","label":"v9.2.0","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"},{"branch":"main","label":"v9.3.0","branchLabelMappingKey":"^v9.3.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/239532","number":239532,"mergeCommit":{"message":"[Security
Solution] Unskip Related Integrations Cypress test
(#239532)\n\n**Resolves:
https://github.com/elastic/kibana/issues/239356**\n\n🟢 Flaky test
runner:\nhttps://buildkite.com/elastic/kibana-flaky-test-suite-runner/builds/9560\n\n#
Summary\nThis PR unskips the Related Integrations Cypress tests. The
tests were\npreviously failing because one of the Fleet packages they
depend on\ncontained a YAML syntax error. That issue has now been
fixed\n([PR](elastic/integrations#15669)), so
the tests\ncan be safely re-enabled.\n\nThe diff appears large, but the
only functional change is the removal of\n`.only`. The rest comes from
Prettier
formatting.","sha":"1bfd3c1046ae74295d77a33d68a0aa91071ce5e5"}},{"branch":"9.1","label":"v9.1.6","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"},{"branch":"8.19","label":"v8.19.6","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"}]}]
BACKPORT-->

Co-authored-by: Nikita Indik <nikita.indik@elastic.co>
kibanamachine added a commit to elastic/kibana that referenced this pull request Oct 21, 2025
…239532) (#239868)

# Backport

This will backport the following commits from `main` to `9.1`:
- [[Security Solution] Unskip Related Integrations Cypress test
(#239532)](#239532)

<!--- Backport version: 9.6.6 -->

### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sorenlouv/backport)

<!--BACKPORT [{"author":{"name":"Nikita
Indik","email":"nikita.indik@elastic.co"},"sourceCommit":{"committedDate":"2025-10-21T09:00:12Z","message":"[Security
Solution] Unskip Related Integrations Cypress test
(#239532)\n\n**Resolves:
https://github.com/elastic/kibana/issues/239356**\n\n🟢 Flaky test
runner:\nhttps://buildkite.com/elastic/kibana-flaky-test-suite-runner/builds/9560\n\n#
Summary\nThis PR unskips the Related Integrations Cypress tests. The
tests were\npreviously failing because one of the Fleet packages they
depend on\ncontained a YAML syntax error. That issue has now been
fixed\n([PR](elastic/integrations#15669)), so
the tests\ncan be safely re-enabled.\n\nThe diff appears large, but the
only functional change is the removal of\n`.only`. The rest comes from
Prettier
formatting.","sha":"1bfd3c1046ae74295d77a33d68a0aa91071ce5e5","branchLabelMapping":{"^v9.3.0$":"main","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["release_note:skip","Team:Detections
and Resp","Team: SecuritySolution","Team:Detection Rule
Management","Feature:Related
Integrations","backport:version","v9.2.0","v9.3.0","v9.1.6","v8.19.6"],"title":"[Security
Solution] Unskip Related Integrations Cypress
test","number":239532,"url":"https://github.com/elastic/kibana/pull/239532","mergeCommit":{"message":"[Security
Solution] Unskip Related Integrations Cypress test
(#239532)\n\n**Resolves:
https://github.com/elastic/kibana/issues/239356**\n\n🟢 Flaky test
runner:\nhttps://buildkite.com/elastic/kibana-flaky-test-suite-runner/builds/9560\n\n#
Summary\nThis PR unskips the Related Integrations Cypress tests. The
tests were\npreviously failing because one of the Fleet packages they
depend on\ncontained a YAML syntax error. That issue has now been
fixed\n([PR](elastic/integrations#15669)), so
the tests\ncan be safely re-enabled.\n\nThe diff appears large, but the
only functional change is the removal of\n`.only`. The rest comes from
Prettier
formatting.","sha":"1bfd3c1046ae74295d77a33d68a0aa91071ce5e5"}},"sourceBranch":"main","suggestedTargetBranches":["9.2","9.1","8.19"],"targetPullRequestStates":[{"branch":"9.2","label":"v9.2.0","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"},{"branch":"main","label":"v9.3.0","branchLabelMappingKey":"^v9.3.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/239532","number":239532,"mergeCommit":{"message":"[Security
Solution] Unskip Related Integrations Cypress test
(#239532)\n\n**Resolves:
https://github.com/elastic/kibana/issues/239356**\n\n🟢 Flaky test
runner:\nhttps://buildkite.com/elastic/kibana-flaky-test-suite-runner/builds/9560\n\n#
Summary\nThis PR unskips the Related Integrations Cypress tests. The
tests were\npreviously failing because one of the Fleet packages they
depend on\ncontained a YAML syntax error. That issue has now been
fixed\n([PR](elastic/integrations#15669)), so
the tests\ncan be safely re-enabled.\n\nThe diff appears large, but the
only functional change is the removal of\n`.only`. The rest comes from
Prettier
formatting.","sha":"1bfd3c1046ae74295d77a33d68a0aa91071ce5e5"}},{"branch":"9.1","label":"v9.1.6","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"},{"branch":"8.19","label":"v8.19.6","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"}]}]
BACKPORT-->

Co-authored-by: Nikita Indik <nikita.indik@elastic.co>
nikitaindik added a commit to nikitaindik/kibana that referenced this pull request Oct 21, 2025
…#239532)

**Resolves: elastic#239356

🟢 Flaky test runner:
https://buildkite.com/elastic/kibana-flaky-test-suite-runner/builds/9560

# Summary
This PR unskips the Related Integrations Cypress tests. The tests were
previously failing because one of the Fleet packages they depend on
contained a YAML syntax error. That issue has now been fixed
([PR](elastic/integrations#15669)), so the tests
can be safely re-enabled.

The diff appears large, but the only functional change is the removal of
`.only`. The rest comes from Prettier formatting.

(cherry picked from commit 1bfd3c1)

# Conflicts:
#	x-pack/solutions/security/test/security_solution_cypress/cypress/e2e/detection_response/rule_management/related_integrations/related_integrations.cy.ts
nikitaindik added a commit to elastic/kibana that referenced this pull request Oct 22, 2025
…239532) (#239926)

ℹ️ The diff appears large, but the only functional change is the removal
of `.only`. The rest comes from Prettier formatting.

# Backport

This will backport the following commits from `main` to `8.19`:
- [[Security Solution] Unskip Related Integrations Cypress test
(#239532)](#239532)

<!--- Backport version: 10.1.0 -->

### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sorenlouv/backport)

<!--BACKPORT [{"author":{"name":"Nikita
Indik","email":"nikita.indik@elastic.co"},"sourceCommit":{"committedDate":"2025-10-21T09:00:12Z","message":"[Security
Solution] Unskip Related Integrations Cypress test
(#239532)\n\n**Resolves:
https://github.com/elastic/kibana/issues/239356**\n\n🟢 Flaky test
runner:\nhttps://buildkite.com/elastic/kibana-flaky-test-suite-runner/builds/9560\n\n#
Summary\nThis PR unskips the Related Integrations Cypress tests. The
tests were\npreviously failing because one of the Fleet packages they
depend on\ncontained a YAML syntax error. That issue has now been
fixed\n([PR](elastic/integrations#15669)), so
the tests\ncan be safely re-enabled.\n\nThe diff appears large, but the
only functional change is the removal of\n`.only`. The rest comes from
Prettier
formatting.","sha":"1bfd3c1046ae74295d77a33d68a0aa91071ce5e5","branchLabelMapping":{"^v9.3.0$":"main","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["release_note:skip","Team:Detections
and Resp","Team: SecuritySolution","Team:Detection Rule
Management","Feature:Related
Integrations","backport:version","v9.2.0","v9.3.0","v9.1.6","v8.19.6"],"title":"[Security
Solution] Unskip Related Integrations Cypress
test","number":239532,"url":"https://github.com/elastic/kibana/pull/239532","mergeCommit":{"message":"[Security
Solution] Unskip Related Integrations Cypress test
(#239532)\n\n**Resolves:
https://github.com/elastic/kibana/issues/239356**\n\n🟢 Flaky test
runner:\nhttps://buildkite.com/elastic/kibana-flaky-test-suite-runner/builds/9560\n\n#
Summary\nThis PR unskips the Related Integrations Cypress tests. The
tests were\npreviously failing because one of the Fleet packages they
depend on\ncontained a YAML syntax error. That issue has now been
fixed\n([PR](elastic/integrations#15669)), so
the tests\ncan be safely re-enabled.\n\nThe diff appears large, but the
only functional change is the removal of\n`.only`. The rest comes from
Prettier
formatting.","sha":"1bfd3c1046ae74295d77a33d68a0aa91071ce5e5"}},"sourceBranch":"main","suggestedTargetBranches":["8.19"],"targetPullRequestStates":[{"branch":"9.2","label":"v9.2.0","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"url":"https://github.com/elastic/kibana/pull/239869","number":239869,"state":"MERGED","mergeCommit":{"sha":"36efd601450c4dbebcd441ae9639bbdfe6cf055f","message":"[9.2]
[Security Solution] Unskip Related Integrations Cypress test (#239532)
(#239869)\n\n# Backport\n\nThis will backport the following commits from
`main` to `9.2`:\n- [[Security Solution] Unskip Related Integrations
Cypress
test\n(#239532)](https://github.com/elastic/kibana/pull/239532)\n\n\n\n###
Questions ?\nPlease refer to the [Backport
tool\ndocumentation](https://github.com/sorenlouv/backport)\n\n\n\nCo-authored-by:
Nikita Indik
<nikita.indik@elastic.co>"}},{"branch":"main","label":"v9.3.0","branchLabelMappingKey":"^v9.3.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/239532","number":239532,"mergeCommit":{"message":"[Security
Solution] Unskip Related Integrations Cypress test
(#239532)\n\n**Resolves:
https://github.com/elastic/kibana/issues/239356**\n\n🟢 Flaky test
runner:\nhttps://buildkite.com/elastic/kibana-flaky-test-suite-runner/builds/9560\n\n#
Summary\nThis PR unskips the Related Integrations Cypress tests. The
tests were\npreviously failing because one of the Fleet packages they
depend on\ncontained a YAML syntax error. That issue has now been
fixed\n([PR](elastic/integrations#15669)), so
the tests\ncan be safely re-enabled.\n\nThe diff appears large, but the
only functional change is the removal of\n`.only`. The rest comes from
Prettier
formatting.","sha":"1bfd3c1046ae74295d77a33d68a0aa91071ce5e5"}},{"branch":"9.1","label":"v9.1.6","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"url":"https://github.com/elastic/kibana/pull/239868","number":239868,"state":"MERGED","mergeCommit":{"sha":"c8d163f6133593a534b53955c7e266a6408ed8e3","message":"[9.1]
[Security Solution] Unskip Related Integrations Cypress test (#239532)
(#239868)\n\n# Backport\n\nThis will backport the following commits from
`main` to `9.1`:\n- [[Security Solution] Unskip Related Integrations
Cypress
test\n(#239532)](https://github.com/elastic/kibana/pull/239532)\n\n\n\n###
Questions ?\nPlease refer to the [Backport
tool\ndocumentation](https://github.com/sorenlouv/backport)\n\n\n\nCo-authored-by:
Nikita Indik
<nikita.indik@elastic.co>"}},{"branch":"8.19","label":"v8.19.6","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"}]}]
BACKPORT-->
nickpeihl pushed a commit to nickpeihl/kibana that referenced this pull request Oct 23, 2025
…#239532)

**Resolves: elastic#239356

🟢 Flaky test runner:
https://buildkite.com/elastic/kibana-flaky-test-suite-runner/builds/9560

# Summary
This PR unskips the Related Integrations Cypress tests. The tests were
previously failing because one of the Fleet packages they depend on
contained a YAML syntax error. That issue has now been fixed
([PR](elastic/integrations#15669)), so the tests
can be safely re-enabled.

The diff appears large, but the only functional change is the removal of
`.only`. The rest comes from Prettier formatting.
NicholasPeretti pushed a commit to NicholasPeretti/kibana that referenced this pull request Oct 27, 2025
…#239532)

**Resolves: elastic#239356

🟢 Flaky test runner:
https://buildkite.com/elastic/kibana-flaky-test-suite-runner/builds/9560

# Summary
This PR unskips the Related Integrations Cypress tests. The tests were
previously failing because one of the Fleet packages they depend on
contained a YAML syntax error. That issue has now been fixed
([PR](elastic/integrations#15669)), so the tests
can be safely re-enabled.

The diff appears large, but the only functional change is the removal of
`.only`. The rest comes from Prettier formatting.
agithomas pushed a commit to agithomas/integrations that referenced this pull request Oct 30, 2025
* Fix Yaml Syntax Issue

* Update changelog with corrected pull request link
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Integration:system System Team:Elastic-Agent-Data-Plane Agent Data Plane team [elastic/elastic-agent-data-plane] Team:Obs-InfraObs Observability Infrastructure Monitoring team [elastic/obs-infraobs-integrations] Team:Security-Linux Platform Linux Platform Security team [elastic/sec-linux-platform]

Projects

None yet

Development

Successfully merging this pull request may close these issues.

6 participants