missing file entitlement used by google-http-client for oauth2 (elastic#123985) (elastic#124015)

ldematte · web-flow · commit 826416b10d47 · 2025-03-05T03:16:35.000+11:00
diff --git a/modules/repository-gcs/src/main/plugin-metadata/entitlement-policy.yaml b/modules/repository-gcs/src/main/plugin-metadata/entitlement-policy.yaml
@@ -1,3 +1,16 @@
 ALL-UNNAMED:
   - set_https_connection_properties # required by google-http-client
   - outbound_network
+  - files:
+      - relative_path: ".config/gcloud"
+        relative_to: "home"
+        mode: "read"
+        platform: "linux"
+      - relative_path: ".config/gcloud"
+        relative_to: "home"
+        mode: "read"
+        platform: "macos"
+      - relative_path: "AppData\\Roaming\\gcloud"
+        relative_to: "home"
+        mode: "read"
+        platform: "windows"
diff --git a/plugins/discovery-gce/src/main/plugin-metadata/entitlement-policy.yaml b/plugins/discovery-gce/src/main/plugin-metadata/entitlement-policy.yaml
@@ -1,3 +1,16 @@
 ALL-UNNAMED:
   - set_https_connection_properties # required by google-http-client
   - outbound_network
+  - files:
+      - relative_path: ".config/gcloud"
+        relative_to: "home"
+        mode: "read"
+        platform: "linux"
+      - relative_path: ".config/gcloud"
+        relative_to: "home"
+        mode: "read"
+        platform: "macos"
+      - relative_path: "AppData\\Roaming\\gcloud"
+        relative_to: "home"
+        mode: "read"
+        platform: "windows"
