elastic
diff --git a/‎x-pack/platform/plugins/shared/fleet/common/constants/agentless.ts‎
Lines changed: 17 additions & 0 deletions b/‎x-pack/platform/plugins/shared/fleet/common/constants/agentless.ts‎
Lines changed: 17 additions & 0 deletions
diff --git a/‎x-pack/platform/plugins/shared/fleet/common/experimental_features.ts‎
Lines changed: 1 addition & 0 deletions b/‎x-pack/platform/plugins/shared/fleet/common/experimental_features.ts‎
Lines changed: 1 addition & 0 deletions
diff --git a/‎x-pack/platform/plugins/shared/fleet/server/errors/index.ts‎
Lines changed: 6 additions & 0 deletions b/‎x-pack/platform/plugins/shared/fleet/server/errors/index.ts‎
Lines changed: 6 additions & 0 deletions
diff --git a/‎x-pack/platform/plugins/shared/fleet/server/mocks/index.ts‎
Lines changed: 1 addition & 0 deletions b/‎x-pack/platform/plugins/shared/fleet/server/mocks/index.ts‎
Lines changed: 1 addition & 0 deletions
diff --git a/‎x-pack/platform/plugins/shared/fleet/server/plugin.ts‎
Lines changed: 14 additions & 0 deletions b/‎x-pack/platform/plugins/shared/fleet/server/plugin.ts‎
Lines changed: 14 additions & 0 deletions
diff --git a/‎x-pack/platform/plugins/shared/fleet/server/services/agents/agentless_agent.test.ts‎
Lines changed: 41 additions & 0 deletions b/‎x-pack/platform/plugins/shared/fleet/server/services/agents/agentless_agent.test.ts‎
Lines changed: 41 additions & 0 deletions
@@ -15,6 +15,23 @@ export const AGENTLESS_GLOBAL_TAG_NAME_ORGANIZATION = 'organization';
 export const AGENTLESS_GLOBAL_TAG_NAME_DIVISION = 'division';
 export const AGENTLESS_GLOBAL_TAG_NAME_TEAM = 'team';
 
+export const MAXIMUM_RETRIES = 3;
+
+const HTTP_500_INTERNAL_SERVER_ERROR = 500;
+const HTTP_502_BAD_GATEWAY = 502;
+const HTTP_503_SERVICE_UNAVAILABLE = 503;
+const HTTP_504_GATEWAY_TIMEOUT = 504;
+
+const ECONNREFUSED_CODE = 'ECONNREFUSED';
+
+export const RETRYABLE_HTTP_STATUSES = [
+  HTTP_500_INTERNAL_SERVER_ERROR,
+  HTTP_502_BAD_GATEWAY,
+  HTTP_503_SERVICE_UNAVAILABLE,
+  HTTP_504_GATEWAY_TIMEOUT,
+];
+
+export const RETRYABLE_SERVER_CODES = [ECONNREFUSED_CODE];
 // Allowed output types for agentless integrations
 export const AGENTLESS_ALLOWED_OUTPUT_TYPES = [outputType.Elasticsearch];
 
 
@@ -11,6 +11,7 @@ const _allowedExperimentalValues = {
   showExperimentalShipperOptions: false,
   useSpaceAwareness: false,
   enableAutomaticAgentUpgrades: false,
+  enabledUpgradeAgentlessDeploymentsTask: false,
 };
 
 /**
 
@@ -65,6 +65,12 @@ export class AgentlessAgentDeleteError extends FleetError {
     super(`Error deleting agentless agent in Fleet, ${message}`);
   }
 }
+
+export class AgentlessAgentUpgradeError extends FleetError {
+  constructor(message: string) {
+    super(`Error upgrading agentless agent in Fleet, ${message}`);
+  }
+}
 export class AgentlessAgentConfigError extends FleetError {
   constructor(message: string) {
     super(`Error validating Agentless API configuration in Fleet, ${message}`);
 
@@ -140,6 +140,7 @@ export const createAppContextStartContractMock = (
       : {}),
     unenrollInactiveAgentsTask: {} as any,
     deleteUnenrolledAgentsTask: {} as any,
+    updateAgentlessDeploymentsTask: {} as any,
   };
 };
 
 
@@ -147,6 +147,7 @@ import { registerUpgradeManagedPackagePoliciesTask } from './services/setup/mana
 import { registerDeployAgentPoliciesTask } from './services/agent_policies/deploy_agent_policies_task';
 import { DeleteUnenrolledAgentsTask } from './tasks/delete_unenrolled_agents_task';
 import { registerBumpAgentPoliciesTask } from './services/agent_policies/bump_agent_policies_task';
+import { UpgradeAgentlessDeploymentsTask } from './tasks/upgrade_agentless_deployment';
 
 export interface FleetSetupDeps {
   security: SecurityPluginSetup;
@@ -198,6 +199,7 @@ export interface FleetAppContext {
   uninstallTokenService: UninstallTokenServiceInterface;
   unenrollInactiveAgentsTask: UnenrollInactiveAgentsTask;
   deleteUnenrolledAgentsTask: DeleteUnenrolledAgentsTask;
+  updateAgentlessDeploymentsTask: UpgradeAgentlessDeploymentsTask;
   taskManagerStart?: TaskManagerStartContract;
   fetchUsage?: (abortController: AbortController) => Promise<FleetUsage | undefined>;
 }
@@ -301,6 +303,7 @@ export class FleetPlugin
   private fleetMetricsTask?: FleetMetricsTask;
   private unenrollInactiveAgentsTask?: UnenrollInactiveAgentsTask;
   private deleteUnenrolledAgentsTask?: DeleteUnenrolledAgentsTask;
+  private updateAgentlessDeploymentsTask?: UpgradeAgentlessDeploymentsTask;
 
   private agentService?: AgentService;
   private packageService?: PackageService;
@@ -648,6 +651,11 @@ export class FleetPlugin
       logFactory: this.initializerContext.logger,
     });
 
+    this.updateAgentlessDeploymentsTask = new UpgradeAgentlessDeploymentsTask({
+      core,
+      taskManager: deps.taskManager,
+      logFactory: this.initializerContext.logger,
+    });
     // Register fields metadata extractors
     registerFieldsMetadataExtractors({ core, fieldsMetadata: deps.fieldsMetadata });
   }
@@ -694,6 +702,7 @@ export class FleetPlugin
       uninstallTokenService,
       unenrollInactiveAgentsTask: this.unenrollInactiveAgentsTask!,
       deleteUnenrolledAgentsTask: this.deleteUnenrolledAgentsTask!,
+      updateAgentlessDeploymentsTask: this.updateAgentlessDeploymentsTask!,
       taskManagerStart: plugins.taskManager,
       fetchUsage: this.fetchUsage,
     });
@@ -704,6 +713,11 @@ export class FleetPlugin
     this.checkDeletedFilesTask?.start({ taskManager: plugins.taskManager }).catch(() => {});
     this.unenrollInactiveAgentsTask?.start({ taskManager: plugins.taskManager }).catch(() => {});
     this.deleteUnenrolledAgentsTask?.start({ taskManager: plugins.taskManager }).catch(() => {});
+
+    this.updateAgentlessDeploymentsTask
+      ?.start({ taskManager: plugins.taskManager })
+      .catch(() => {});
+
     startFleetUsageLogger(plugins.taskManager).catch(() => {});
     this.fleetMetricsTask
       ?.start(plugins.taskManager, core.elasticsearch.client.asInternalUser)
 
@@ -512,6 +512,47 @@ describe('Agentless Agent service', () => {
     );
   });
 
+  it('should upgraded agentless agent for ESS', async () => {
+    const returnValue = {
+      id: 'mocked',
+      regional_id: 'mocked',
+    };
+    (axios as jest.MockedFunction<typeof axios>).mockResolvedValueOnce(returnValue);
+    jest.spyOn(appContextService, 'getConfig').mockReturnValue({
+      agentless: {
+        enabled: true,
+        api: {
+          url: 'http://api.agentless.com',
+          tls: {
+            certificate: '/path/to/cert',
+            key: '/path/to/key',
+            ca: '/path/to/ca',
+          },
+        },
+      },
+    } as any);
+    jest.spyOn(appContextService, 'getCloud').mockReturnValue({ isCloudEnabled: true } as any);
+
+    await agentlessAgentService.upgradeAgentlessDeployment(
+      'mocked-agentless-agent-policy-id',
+      '8.17.0'
+    );
+
+    expect(axios).toHaveBeenCalledTimes(1);
+
+    expect(axios).toHaveBeenCalledWith(
+      expect.objectContaining({
+        headers: expect.anything(),
+        httpsAgent: expect.anything(),
+        method: 'PUT',
+        data: {
+          stack_version: '8.17.0',
+        },
+        url: 'http://api.agentless.com/api/v1/ess/deployments/mocked-agentless-agent-policy-id',
+      })
+    );
+  });
+
   it('should delete agentless agent for serverless', async () => {
     const returnValue = {
       id: 'mocked',
Original file line number	Diff line number	Diff line change
`@@ -65,6 +65,12 @@ export class AgentlessAgentDeleteError extends FleetError {`
`65`	`65`	super(`Error deleting agentless agent in Fleet, ${message}`);
`66`	`66`	`}`
`67`	`67`	`}`
	`68`	`+`
	`69`	`+export class AgentlessAgentUpgradeError extends FleetError {`
	`70`	`+ constructor(message: string) {`
	`71`	+ super(`Error upgrading agentless agent in Fleet, ${message}`);
	`72`	`+ }`
	`73`	`+}`
`68`	`74`	`export class AgentlessAgentConfigError extends FleetError {`
`69`	`75`	`constructor(message: string) {`
`70`	`76`	super(`Error validating Agentless API configuration in Fleet, ${message}`);