Skip to content

trend_micro_vision_one: reword telemetry CEL comment to avoid policy flake tests#18544

Open
kcreddy wants to merge 1 commit intoelastic:mainfrom
kcreddy:tmv1-flaky-policy
Open

trend_micro_vision_one: reword telemetry CEL comment to avoid policy flake tests#18544
kcreddy wants to merge 1 commit intoelastic:mainfrom
kcreddy:tmv1-flaky-policy

Conversation

@kcreddy
Copy link
Copy Markdown
Contributor

@kcreddy kcreddy commented Apr 21, 2026

Proposed commit message

trend_micro_vision_one: reword telemetry CEL comment to avoid policy flake

The daily Serverless policy test for the telemetry data stream
intermittently failed because Fleet on Serverless re-emits the
`program: |` literal block scalar differently from the local 9.4.0
stack. When a comment contained a quoted phrase that spanned two
adjacent lines, the re-emitted YAML folded those lines into one and
the resulting policy no longer matched the expected output.

Drop the cross-line double-quoted phrase in the CEL comment block and
update both policy test expectations so the template and expected
output stay consistent. This is a content-level workaround; the
underlying emitter behaviour in Serverless is not addressed here.

Fixes #18519, #18518

Note

No changelog: this only adjusts a comment in the telemetry CEL program and the corresponding policy-test expectations. Not a user-facing change.

Checklist

  • I have reviewed tips for building integrations and this pull request is aligned with them.
  • I have verified that all data streams collect metrics or logs.
  • I have added an entry to my package's changelog.yml file.
  • I have verified that Kibana version constraints are current according to guidelines.
  • I have verified that any added dashboard complies with Kibana's Dashboard good practices

Related issues

@kcreddy kcreddy self-assigned this Apr 21, 2026
@kcreddy kcreddy added Integration:trend_micro_vision_one TrendAI Vision One flaky-test Unstable or unreliable test cases. Team:Security-Service Integrations Security Service Integrations team [elastic/security-service-integrations] labels Apr 21, 2026
@kcreddy kcreddy marked this pull request as ready for review April 21, 2026 09:17
@kcreddy kcreddy requested a review from a team as a code owner April 21, 2026 09:17
@elasticmachine
Copy link
Copy Markdown

Pinging @elastic/security-service-integrations (Team:Security-Service Integrations)

@elastic-vault-github-plugin-prod
Copy link
Copy Markdown

🚀 Benchmarks report

To see the full report comment with /test benchmark fullreport

@elasticmachine
Copy link
Copy Markdown

💚 Build Succeeded

cc @kcreddy

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

flaky-test Unstable or unreliable test cases. Integration:trend_micro_vision_one TrendAI Vision One Team:Security-Service Integrations Security Service Integrations team [elastic/security-service-integrations]

Projects

None yet

2 participants