Skip to content

[ti_rapid7_threat_command] Add Agentless Deployment#18331

Merged
mohitjha-elastic merged 3 commits intoelastic:mainfrom
mohitjha-elastic:ti_rapid7_threat_command-agentless
Apr 23, 2026
Merged

[ti_rapid7_threat_command] Add Agentless Deployment#18331
mohitjha-elastic merged 3 commits intoelastic:mainfrom
mohitjha-elastic:ti_rapid7_threat_command-agentless

Conversation

@mohitjha-elastic
Copy link
Copy Markdown
Collaborator

@mohitjha-elastic mohitjha-elastic commented Apr 10, 2026

Proposed commit message

ti_rapid7_threat_command: add agentless deployment

Checklist

  • I have reviewed tips for building integrations and this pull request is aligned with them.
  • I have verified that all data streams collect metrics or logs.
  • I have added an entry to my package's changelog.yml file.
  • I have verified that Kibana version constraints are current according to guidelines.
  • I have verified that any added dashboard complies with Kibana's Dashboard good practices

How to test this PR locally

  • Clone integrations repo.
  • Install the elastic package locally.
  • Start the elastic stack using the elastic package.
  • Move to integrations/packages/ti_rapid7_threat_command directory.
  • Run the following command to run tests.

elastic-package test -v

Related issues

@mohitjha-elastic mohitjha-elastic self-assigned this Apr 10, 2026
@mohitjha-elastic mohitjha-elastic added the documentation Improvements or additions to documentation. Applied to PRs that modify *.md files. label Apr 10, 2026
@mohitjha-elastic mohitjha-elastic requested a review from a team as a code owner April 10, 2026 12:00
@mohitjha-elastic mohitjha-elastic added enhancement New feature or request Integration:ti_rapid7_threat_command Rapid7 Threat Command (Partner supported) Team:Security-Service Integrations Security Service Integrations team [elastic/security-service-integrations] Team:SDE-Crest Crest developers on the Security Integrations team [elastic/sit-crest-contractors] labels Apr 10, 2026
@elasticmachine
Copy link
Copy Markdown

elasticmachine commented Apr 10, 2026

Pinging @elastic/security-service-integrations (Team:Security-Service Integrations)

@github-actions
Copy link
Copy Markdown
Contributor

github-actions Bot commented Apr 10, 2026

✅ Vale Linting Results

No issues found on modified lines!

The Vale linter checks documentation changes against the Elastic Docs style guide.

To use Vale locally or report issues, refer to Elastic style guide for Vale.

@elastic-vault-github-plugin-prod
Copy link
Copy Markdown

elastic-vault-github-plugin-prod Bot commented Apr 10, 2026

🚀 Benchmarks report

To see the full report comment with /test benchmark fullreport

andrewkroh
andrewkroh reviewed Apr 10, 2026
View reviewed changes
Comment thread packages/ti_rapid7_threat_command/manifest.yml Outdated
team: security-service-integrations
resources:
requests:
memory: 4Gi
Copy link
Copy Markdown
Member

@andrewkroh andrewkroh Apr 10, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

That's a lot of memory. How was this number determined?

Copy link
Copy Markdown
Collaborator Author

@mohitjha-elastic mohitjha-elastic Apr 13, 2026 •
edited
Loading

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Please find the discussion here.

Copy link
Copy Markdown
Member

@andrewkroh andrewkroh Apr 22, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This decision to move to 4GiB does not seem to be backed by data. Can we ship it with the defaults to start with an increase it if there is a problem? Or do you have specific evidence that rapid7 requires 4Gi?

Copy link
Copy Markdown
Collaborator Author

@mohitjha-elastic mohitjha-elastic Apr 23, 2026 •
edited
Loading

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@andrewkroh We do not observe any issue while testing. Updated it to use the default memory. Thanks!

@elasticmachine
Copy link
Copy Markdown

elasticmachine commented Apr 23, 2026

💚 Build Succeeded

History

cc @mohitjha-elastic

@mohitjha-elastic mohitjha-elastic merged commit b4b3cac into elastic:main Apr 23, 2026
13 checks passed
@mohitjha-elastic mohitjha-elastic deleted the ti_rapid7_threat_command-agentless branch April 23, 2026 11:35
@elastic-vault-github-plugin-prod
Copy link
Copy Markdown

elastic-vault-github-plugin-prod Bot commented Apr 23, 2026

Package ti_rapid7_threat_command - 2.8.0 containing this change is available at https://epr.elastic.co/package/ti_rapid7_threat_command/2.8.0/

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@andrewkroh andrewkroh andrewkroh approved these changes

Assignees

@mohitjha-elastic mohitjha-elastic

Labels

documentation Improvements or additions to documentation. Applied to PRs that modify *.md files. enhancement New feature or request Integration:ti_rapid7_threat_command Rapid7 Threat Command (Partner supported) Team:SDE-Crest Crest developers on the Security Integrations team [elastic/sit-crest-contractors] Team:Security-Service Integrations Security Service Integrations team [elastic/security-service-integrations]

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

[ti_rapid7_threat_command] Add Agentless Deployment Support

3 participants

@mohitjha-elastic @elasticmachine @andrewkroh