elastic / elastic/cloudbeat

Support Conditional Integration Usage

Open
#2,128 3 comments 0 reactions 0 assignees View on GitHub
cloudbeat Team:Cloud Security
Dominant language
Go
Stars
58
Forks
55
Avg merge
9h 9m
Merged PRs (30d)
424

Description

**Is your feature request related to a problem? Please describe.**

As an operator of Kubernetes on multiple platforms (AWS, Self-managed, GCP, Azure, etc...). I'd like to maintain a single Elastic Agent policy, while specifying multiple Security Posture Management integrations that are conditionally run depending on specific conditions.

**Describe the solution you'd like**

It would be nice if Security Posture Management integrations supported Elastic Agent [conditions](https://www.elastic.co/guide/en/fleet/current/conditions-based-autodiscover.html). This would allow an operator to choose when and where these integrations run, while using the same policy.

**Describe alternatives you've considered**

1. Have multiple unique Elastic Agent policies for each deployment type.
- I have opted to not go this path as the management overhead here becomes a nightmare
2. Elastic Agent supports sub-policies/reusable policies; https://github.com/elastic/elastic-agent/issues/2227

**Additional context**

The lack of this feature and the overhead (or lack) of alternatives, currently dissuades us from adopting these features.

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.