Skip to content

Commit 8281029

Browse files
1 parent d748aea commit 8281029

File tree

170 files changed

+595
-0
lines changed

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

170 files changed

+595
-0
lines changed

fleet_input/cel/README.md

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -32,6 +32,7 @@ No resources.
3232
| <a name="input_fleet_agent_policy_id"></a> [fleet\_agent\_policy\_id](#input\_fleet\_agent\_policy\_id) | Agent policy ID to add the package policy to. | `string` | n/a | yes |
3333
| <a name="input_fleet_data_stream_namespace"></a> [fleet\_data\_stream\_namespace](#input\_fleet\_data\_stream\_namespace) | Namespace to use for the data stream. | `string` | `"default"` | no |
3434
| <a name="input_fleet_package_policy_description"></a> [fleet\_package\_policy\_description](#input\_fleet\_package\_policy\_description) | Description to use for the package policy. | `string` | `""` | no |
35+
| <a name="input_fleet_package_policy_force"></a> [fleet\_package\_policy\_force](#input\_fleet\_package\_policy\_force) | Force reinstallation of the package even if already installed. When true, bypasses "already installed" checks and triggers complete re-installation. This deletes and recreates Kibana assets (dashboards, visualizations), removes transforms and their destination indices, and overwrites ingest pipelines and templates. | `bool` | `true` | no |
3536
| <a name="input_fleet_package_policy_name_suffix"></a> [fleet\_package\_policy\_name\_suffix](#input\_fleet\_package\_policy\_name\_suffix) | Suffix to append to the end of the package policy name. | `string` | `""` | no |
3637
| <a name="input_fleet_package_version"></a> [fleet\_package\_version](#input\_fleet\_package\_version) | Version of the cel package to use. | `string` | `"1.19.0"` | no |
3738
| <a name="input_oauth_azure_resource"></a> [oauth\_azure\_resource](#input\_oauth\_azure\_resource) | Optional setting for the accessed WebAPI resource when using azure provider. | `string` | `null` | no |

fleet_input/cel/module.tf.json

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -58,6 +58,11 @@
5858
"description": "Description to use for the package policy.",
5959
"default": ""
6060
},
61+
"fleet_package_policy_force": {
62+
"type": "bool",
63+
"description": "Force reinstallation of the package even if already installed. When true, bypasses \"already installed\" checks and triggers complete re-installation. This deletes and recreates Kibana assets (dashboards, visualizations), removes transforms and their destination indices, and overwrites ingest pipelines and templates.",
64+
"default": true
65+
},
6166
"fleet_package_policy_name_suffix": {
6267
"type": "string",
6368
"description": "Suffix to append to the end of the package policy name.",
@@ -301,6 +306,7 @@
301306
"data_stream": "",
302307
"data_stream_variables_json": "${jsonencode({\n allowed_environment = var.allowed_environment\n condition = var.condition\n \"data_stream.dataset\" = var.data_stream_dataset\n delete_redacted_fields = var.delete_redacted_fields\n digest_no_reuse = var.digest_no_reuse\n digest_password = var.digest_password\n digest_username = var.digest_username\n enable_request_tracer = var.enable_request_tracer\n oauth_azure_resource = var.oauth_azure_resource\n oauth_azure_tenant_id = var.oauth_azure_tenant_id\n oauth_endpoint_params = var.oauth_endpoint_params_yaml\n oauth_google_credentials_file = var.oauth_google_credentials_file\n oauth_google_credentials_json = var.oauth_google_credentials_json\n oauth_google_delegated_account = var.oauth_google_delegated_account\n oauth_google_jwt_file = var.oauth_google_jwt_file\n oauth_google_jwt_json = var.oauth_google_jwt_json\n oauth_id = var.oauth_id\n oauth_okta_jwt_file = var.oauth_okta_jwt_file\n oauth_okta_jwt_json = var.oauth_okta_jwt_json\n oauth_okta_jwt_pem = var.oauth_okta_jwt_pem\n oauth_password = var.oauth_password\n oauth_provider = var.oauth_provider\n oauth_scopes = var.oauth_scopes\n oauth_secret = var.oauth_secret\n oauth_token_url = var.oauth_token_url\n oauth_user = var.oauth_user\n password = var.password\n pipeline = var.pipeline\n processors = var.processors_yaml\n program = var.program\n redact_fields = var.redact_fields\n regexp = var.regexp_yaml\n resource_headers = var.resource_headers_yaml\n resource_interval = var.resource_interval\n resource_proxy_url = var.resource_proxy_url\n resource_rate_limit_burst = var.resource_rate_limit_burst\n resource_rate_limit_limit = var.resource_rate_limit_limit\n resource_redirect_forward_headers = var.resource_redirect_forward_headers\n resource_redirect_headers_ban_list = var.resource_redirect_headers_ban_list\n resource_redirect_max_redirects = var.resource_redirect_max_redirects\n resource_retry_max_attempts = var.resource_retry_max_attempts\n resource_retry_wait_max = var.resource_retry_wait_max\n resource_retry_wait_min = var.resource_retry_wait_min\n resource_ssl = var.resource_ssl_yaml\n resource_timeout = var.resource_timeout\n resource_url = var.resource_url\n state = var.state_yaml\n tags = var.tags\n username = var.username\n xsd = var.xsd\n})}",
303308
"description": "${var.fleet_package_policy_description}",
309+
"force": "${var.fleet_package_policy_force}",
304310
"input_type": "cel",
305311
"namespace": "${var.fleet_data_stream_namespace}",
306312
"package_name": "cel",

fleet_input/log/README.md

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -27,6 +27,7 @@ No resources.
2727
| <a name="input_fleet_agent_policy_id"></a> [fleet\_agent\_policy\_id](#input\_fleet\_agent\_policy\_id) | Agent policy ID to add the package policy to. | `string` | n/a | yes |
2828
| <a name="input_fleet_data_stream_namespace"></a> [fleet\_data\_stream\_namespace](#input\_fleet\_data\_stream\_namespace) | Namespace to use for the data stream. | `string` | `"default"` | no |
2929
| <a name="input_fleet_package_policy_description"></a> [fleet\_package\_policy\_description](#input\_fleet\_package\_policy\_description) | Description to use for the package policy. | `string` | `""` | no |
30+
| <a name="input_fleet_package_policy_force"></a> [fleet\_package\_policy\_force](#input\_fleet\_package\_policy\_force) | Force reinstallation of the package even if already installed. When true, bypasses "already installed" checks and triggers complete re-installation. This deletes and recreates Kibana assets (dashboards, visualizations), removes transforms and their destination indices, and overwrites ingest pipelines and templates. | `bool` | `true` | no |
3031
| <a name="input_fleet_package_policy_name_suffix"></a> [fleet\_package\_policy\_name\_suffix](#input\_fleet\_package\_policy\_name\_suffix) | Suffix to append to the end of the package policy name. | `string` | `""` | no |
3132
| <a name="input_fleet_package_version"></a> [fleet\_package\_version](#input\_fleet\_package\_version) | Version of the log package to use. | `string` | `"2.4.4"` | no |
3233
| <a name="input_ignore_older"></a> [ignore\_older](#input\_ignore\_older) | If this option is specified, events that are older than the specified amount of time are ignored. Valid time units are "ns", "us" (or "µs"), "ms", "s", "m", "h". | `string` | `"72h"` | no |

fleet_input/log/module.tf.json

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -30,6 +30,11 @@
3030
"description": "Description to use for the package policy.",
3131
"default": ""
3232
},
33+
"fleet_package_policy_force": {
34+
"type": "bool",
35+
"description": "Force reinstallation of the package even if already installed. When true, bypasses \"already installed\" checks and triggers complete re-installation. This deletes and recreates Kibana assets (dashboards, visualizations), removes transforms and their destination indices, and overwrites ingest pipelines and templates.",
36+
"default": true
37+
},
3338
"fleet_package_policy_name_suffix": {
3439
"type": "string",
3540
"description": "Suffix to append to the end of the package policy name.",
@@ -75,6 +80,7 @@
7580
"data_stream": "",
7681
"data_stream_variables_json": "${jsonencode({\n custom = var.custom_yaml\n \"data_stream.dataset\" = var.data_stream_dataset\n exclude_files = var.exclude_files\n ignore_older = var.ignore_older\n paths = var.paths\n processors = var.processors_yaml\n tags = var.tags\n})}",
7782
"description": "${var.fleet_package_policy_description}",
83+
"force": "${var.fleet_package_policy_force}",
7884
"input_type": "logfile",
7985
"namespace": "${var.fleet_data_stream_namespace}",
8086
"package_name": "log",

fleet_input/sql/README.md

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -27,6 +27,7 @@ No resources.
2727
| <a name="input_fleet_agent_policy_id"></a> [fleet\_agent\_policy\_id](#input\_fleet\_agent\_policy\_id) | Agent policy ID to add the package policy to. | `string` | n/a | yes |
2828
| <a name="input_fleet_data_stream_namespace"></a> [fleet\_data\_stream\_namespace](#input\_fleet\_data\_stream\_namespace) | Namespace to use for the data stream. | `string` | `"default"` | no |
2929
| <a name="input_fleet_package_policy_description"></a> [fleet\_package\_policy\_description](#input\_fleet\_package\_policy\_description) | Description to use for the package policy. | `string` | `""` | no |
30+
| <a name="input_fleet_package_policy_force"></a> [fleet\_package\_policy\_force](#input\_fleet\_package\_policy\_force) | Force reinstallation of the package even if already installed. When true, bypasses "already installed" checks and triggers complete re-installation. This deletes and recreates Kibana assets (dashboards, visualizations), removes transforms and their destination indices, and overwrites ingest pipelines and templates. | `bool` | `true` | no |
3031
| <a name="input_fleet_package_policy_name_suffix"></a> [fleet\_package\_policy\_name\_suffix](#input\_fleet\_package\_policy\_name\_suffix) | Suffix to append to the end of the package policy name. | `string` | `""` | no |
3132
| <a name="input_fleet_package_version"></a> [fleet\_package\_version](#input\_fleet\_package\_version) | Version of the sql package to use. | `string` | `"1.1.0"` | no |
3233
| <a name="input_hosts"></a> [hosts](#input\_hosts) | n/a | `list(string)` | <pre>[<br> "root:test@tcp(127.0.0.1:3306)/"<br>]</pre> | no |

fleet_input/sql/module.tf.json

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -31,6 +31,11 @@
3131
"description": "Description to use for the package policy.",
3232
"default": ""
3333
},
34+
"fleet_package_policy_force": {
35+
"type": "bool",
36+
"description": "Force reinstallation of the package even if already installed. When true, bypasses \"already installed\" checks and triggers complete re-installation. This deletes and recreates Kibana assets (dashboards, visualizations), removes transforms and their destination indices, and overwrites ingest pipelines and templates.",
37+
"default": true
38+
},
3439
"fleet_package_policy_name_suffix": {
3540
"type": "string",
3641
"description": "Suffix to append to the end of the package policy name.",
@@ -87,6 +92,7 @@
8792
"data_stream": "",
8893
"data_stream_variables_json": "${jsonencode({\n condition = var.condition\n \"data_stream.dataset\" = var.data_stream_dataset\n driver = var.driver\n hosts = var.hosts\n merge_results = var.merge_results\n period = var.period\n processors = var.processors_yaml\n sql_queries = var.sql_queries_yaml\n ssl = var.ssl_yaml\n})}",
8994
"description": "${var.fleet_package_policy_description}",
95+
"force": "${var.fleet_package_policy_force}",
9096
"input_type": "sql/metrics",
9197
"namespace": "${var.fleet_data_stream_namespace}",
9298
"package_name": "sql",

fleet_input/winlog/README.md

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -28,6 +28,7 @@ No resources.
2828
| <a name="input_fleet_agent_policy_id"></a> [fleet\_agent\_policy\_id](#input\_fleet\_agent\_policy\_id) | Agent policy ID to add the package policy to. | `string` | n/a | yes |
2929
| <a name="input_fleet_data_stream_namespace"></a> [fleet\_data\_stream\_namespace](#input\_fleet\_data\_stream\_namespace) | Namespace to use for the data stream. | `string` | `"default"` | no |
3030
| <a name="input_fleet_package_policy_description"></a> [fleet\_package\_policy\_description](#input\_fleet\_package\_policy\_description) | Description to use for the package policy. | `string` | `""` | no |
31+
| <a name="input_fleet_package_policy_force"></a> [fleet\_package\_policy\_force](#input\_fleet\_package\_policy\_force) | Force reinstallation of the package even if already installed. When true, bypasses "already installed" checks and triggers complete re-installation. This deletes and recreates Kibana assets (dashboards, visualizations), removes transforms and their destination indices, and overwrites ingest pipelines and templates. | `bool` | `true` | no |
3132
| <a name="input_fleet_package_policy_name_suffix"></a> [fleet\_package\_policy\_name\_suffix](#input\_fleet\_package\_policy\_name\_suffix) | Suffix to append to the end of the package policy name. | `string` | `""` | no |
3233
| <a name="input_fleet_package_version"></a> [fleet\_package\_version](#input\_fleet\_package\_version) | Version of the winlog package to use. | `string` | `"2.4.0"` | no |
3334
| <a name="input_ignore_older"></a> [ignore\_older](#input\_ignore\_older) | If this option is specified, events that are older than the specified amount of time are ignored. Valid time units are "ns", "us" (or "µs"), "ms", "s", "m", "h". | `string` | `"72h"` | no |

fleet_input/winlog/module.tf.json

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -36,6 +36,11 @@
3636
"description": "Description to use for the package policy.",
3737
"default": ""
3838
},
39+
"fleet_package_policy_force": {
40+
"type": "bool",
41+
"description": "Force reinstallation of the package even if already installed. When true, bypasses \"already installed\" checks and triggers complete re-installation. This deletes and recreates Kibana assets (dashboards, visualizations), removes transforms and their destination indices, and overwrites ingest pipelines and templates.",
42+
"default": true
43+
},
3944
"fleet_package_policy_name_suffix": {
4045
"type": "string",
4146
"description": "Suffix to append to the end of the package policy name.",
@@ -102,6 +107,7 @@
102107
"data_stream": "",
103108
"data_stream_variables_json": "${jsonencode({\n channel = var.channel\n custom = var.custom_yaml\n \"data_stream.dataset\" = var.data_stream_dataset\n event_id = var.event_id\n ignore_older = var.ignore_older\n language = var.language\n level = var.level\n pipeline = var.pipeline\n preserve_original_event = var.preserve_original_event\n providers = var.providers_names\n tags = var.tags\n xml_query = var.xml_query\n})}",
104109
"description": "${var.fleet_package_policy_description}",
110+
"force": "${var.fleet_package_policy_force}",
105111
"input_type": "winlog",
106112
"namespace": "${var.fleet_data_stream_namespace}",
107113
"package_name": "winlog",

fleet_integration/aws.cloudtrail.aws-s3/README.md

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -40,6 +40,7 @@ No resources.
4040
| <a name="input_fleet_agent_policy_id"></a> [fleet\_agent\_policy\_id](#input\_fleet\_agent\_policy\_id) | Agent policy ID to add the package policy to. | `string` | n/a | yes |
4141
| <a name="input_fleet_data_stream_namespace"></a> [fleet\_data\_stream\_namespace](#input\_fleet\_data\_stream\_namespace) | Namespace to use for the data stream. | `string` | `"default"` | no |
4242
| <a name="input_fleet_package_policy_description"></a> [fleet\_package\_policy\_description](#input\_fleet\_package\_policy\_description) | Description to use for the package policy. | `string` | `""` | no |
43+
| <a name="input_fleet_package_policy_force"></a> [fleet\_package\_policy\_force](#input\_fleet\_package\_policy\_force) | Force reinstallation of the package even if already installed. When true, bypasses "already installed" checks and triggers complete re-installation. This deletes and recreates Kibana assets (dashboards, visualizations), removes transforms and their destination indices, and overwrites ingest pipelines and templates. | `bool` | `true` | no |
4344
| <a name="input_fleet_package_policy_name_suffix"></a> [fleet\_package\_policy\_name\_suffix](#input\_fleet\_package\_policy\_name\_suffix) | Suffix to append to the end of the package policy name. | `string` | `""` | no |
4445
| <a name="input_fleet_package_version"></a> [fleet\_package\_version](#input\_fleet\_package\_version) | Version of the aws package to use. | `string` | `"5.6.1"` | no |
4546
| <a name="input_ignore_older"></a> [ignore\_older](#input\_ignore\_older) | If set, ignore S3 objects whose Last-Modified time is before the ignore older timespan. Timespan is checked from the current time to S3 object's Last-Modified time. Accepts a duration like `48h`, `2h30m`. | `string` | `null` | no |

fleet_integration/aws.cloudtrail.aws-s3/module.tf.json

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -96,6 +96,11 @@
9696
"description": "Description to use for the package policy.",
9797
"default": ""
9898
},
99+
"fleet_package_policy_force": {
100+
"type": "bool",
101+
"description": "Force reinstallation of the package even if already installed. When true, bypasses \"already installed\" checks and triggers complete re-installation. This deletes and recreates Kibana assets (dashboards, visualizations), removes transforms and their destination indices, and overwrites ingest pipelines and templates.",
102+
"default": true
103+
},
99104
"fleet_package_policy_name_suffix": {
100105
"type": "string",
101106
"description": "Suffix to append to the end of the package policy name.",
@@ -262,6 +267,7 @@
262267
"data_stream": "cloudtrail",
263268
"data_stream_variables_json": "${jsonencode({\n access_point_arn = var.access_point_arn\n actor_target_mapping = var.actor_target_mapping\n api_timeout = var.api_timeout\n bucket_arn = var.bucket_arn\n bucket_list_prefix = var.bucket_list_prefix\n cloudtrail_digest_regex = var.cloudtrail_digest_regex\n cloudtrail_insight_regex = var.cloudtrail_insight_regex\n cloudtrail_regex = var.cloudtrail_regex\n collect_s3_logs = var.collect_s3_logs\n custom = var.custom_yaml\n endpoint = var.endpoint\n fips_enabled = var.fips_enabled\n ignore_older = var.ignore_older\n interval = var.interval\n max_number_of_messages = var.max_number_of_messages\n number_of_workers = var.number_of_workers\n preserve_original_event = var.preserve_original_event\n processors = var.processors_yaml\n queue_url = var.queue_url\n region = var.region\n retain = var.retain\n start_timestamp = var.start_timestamp\n tags = var.tags\n visibility_timeout = var.visibility_timeout\n})}",
264269
"description": "${var.fleet_package_policy_description}",
270+
"force": "${var.fleet_package_policy_force}",
265271
"input_type": "aws-s3",
266272
"namespace": "${var.fleet_data_stream_namespace}",
267273
"package_name": "aws",

0 commit comments

Comments
 (0)